CVE-2023-20592: vulnerability in AMD 1st Gen AMD EPYC™ Processors
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.0%
In short
A flaw in how some AMD CPUs handle the INVD instruction allows a malicious hypervisor to interfere with cache memory operations, potentially corrupting data in guest virtual machines.
Technical detail
The INVD instruction improperly handles cache line write-back behavior on affected AMD processors. An attacker controlling a hypervisor can exploit this to compromise memory integrity of guest VMs, requiring hypervisor-level access as a prerequisite.
Summary generated and translated by AI from the official description.
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.
Affected products
AMD · 1st Gen AMD EPYC™ ProcessorsAMD · 2nd Gen AMD EPYC™ ProcessorsAMD · 3rd Gen AMD EPYC™ ProcessorsRelated CVEs — AMD 1st Gen AMD EPYC™ Processors
In the same product, most dangerous first.