CVE-2022-27672

CVE-2022-27672: vulnerability in AMD 1st Gen AMD EPYC™ Processors

Published · Updated

Follow this CVE+ Monitor 2nd Gen AMD EPYC™ Processors+ Monitor 1st Gen AMD EPYC™ Processors

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
Affected products
AMD · 1st Gen AMD EPYC™ ProcessorsAMD · 2nd Gen AMD EPYC™ ProcessorsAMD · 2nd Gen AMD Ryzen™ Threadripper™ ProcessorsAMD · 3rd Gen AMD Ryzen™ Threadripper™ ProcessorsAMD · 7th Generation AMD A-Series APUsAMD · Athlon™ Mobile ProcessorsAMD · Athlon™ X4 ProcessorAMD · Ryzen™ 2000 Series ProcessorsAMD · Ryzen™ 3000 Series ProcessorsAMD · Ryzen™ 4000 Series ProcessorsAMD · Ryzen™ 5000 Series ProcessorsAMD · Ryzen™ Threadripper™ PRO Processor
Related CVEs — AMD 1st Gen AMD EPYC™ Processors

In the same product, most dangerous first.

CVE-2023-20569—CVE-2023-20569EPSS 7.3%CVE-2023-20593—CVE-2023-20593EPSS 5.1%CVE-2023-20592—CVE-2023-20592EPSS 1.0%CVE-2023-20575MEDIUMCVE-2023-20575EPSS 0.8%CVE-2021-46756CRITICALCVE-2021-46756EPSS 0.6%CVE-2023-31315HIGHCVE-2023-31315EPSS 0.6%