CVE-2023-20569: vulnerability in Ryzen™ PRO 5000 Series Desktop Processors
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in certain AMD processors allows attackers to manipulate how the CPU predicts where to return after function calls, causing it to speculatively execute code at attacker-chosen addresses and potentially leak sensitive information.
A side-channel vulnerability in AMD CPU branch prediction mechanisms enables an attacker to influence return address prediction without elevated privileges, inducing speculative execution at attacker-controlled addresses. This can lead to information disclosure through speculative execution side channels, particularly affecting processes running on the same physical core.
In the same product, most dangerous first.