Details of VAR-202311-1187

ID

VAR-202311-1187

CVE

CVE-2023-20592

TITLE

AMD CPU Instruction Misconception

Trust: 0.6

sources: CNVD: CNVD-2025-29751

DESCRIPTION

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity. AMD CPUs are a series of CPUs from AMD Inc. AMD CPUs contain a misguided instruction vulnerability. The following advisory data is extracted from: https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0753.json Red Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness. It must be noted that due to an inability to easily track revision updates without crawling Red Hat's archive, these advisories are single notifications and we strongly suggest that you visit the Red Hat provided links to ensure you have the latest information available if the subject matter listed pertains to your environment. - Packet Storm Staff ==================================================================== Red Hat Security Advisory Synopsis: Moderate: linux-firmware security update Advisory ID: RHSA-2024:0753-03 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2024:0753 Issue date: 2024-02-09 Revision: 03 CVE Names: CVE-2023-20592 ==================================================================== Summary: An update for linux-firmware is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * (RCVE-2023-20592) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution: https://access.redhat.com/articles/11258 CVEs: CVE-2023-20592 References: https://access.redhat.com/security/updates/classification/#moderate https://bugzilla.redhat.com/show_bug.cgi?id=2244590

Trust: 1.8

sources: NVD: CVE-2023-20592 // CNVD: CNVD-2025-29751 // VULMON: CVE-2023-20592 // PACKETSTORM: 177057 // PACKETSTORM: 177305 // PACKETSTORM: 177304

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-29751

AFFECTED PRODUCTS

vendor:	amd	model:	epyc 7402p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7f32	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7281	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7f52	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7601	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7282	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7h12	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7643p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7532	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 75f3	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 73f3	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7313p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7502p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7313	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7401p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 74f3	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7252	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7552	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7443	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7303	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7502	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7303p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7551	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7413	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7262	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7373x	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7351	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7542	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7302	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7473x	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7551p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7663	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 72f3	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7272	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7203p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7662	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7251	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7402	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7302p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7713p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7643	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7452	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7713	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7642	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7501	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7351p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7371	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7763	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7451	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7513	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7261	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7f72	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7453	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7443p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7343	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7702	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7203	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7401	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7742	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7001	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7773x	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7573x	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7352	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7663p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7543	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	epyc 7232p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7301	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7702p	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	epyc 7543p	scope:	lt	version:	milanpi_1.0.0.c	Trust: 1.0
vendor:	amd	model:	cpu	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2025-29751 // NVD: CVE-2023-20592

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-20592
value:	MEDIUM
Trust: 1.0
CNVD:	CNVD-2025-29751
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2025-29751
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:C/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	COMPLETE
availabilityImpact:	NONE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2023-20592
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0

sources: CNVD: CNVD-2025-29751 // NVD: CVE-2023-20592

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2023-20592

PATCH

title:	Patch for AMD CPU Instruction Misconception	url:	https://www.cnvd.org.cn/patchInfo/show/777111	Trust: 0.6
title:	-	url:	https://github.com/cispa/CacheWarp	Trust: 0.1

sources: CNVD: CNVD-2025-29751 // VULMON: CVE-2023-20592

EXTERNAL IDS

db:	NVD	id:	CVE-2023-20592	Trust: 2.0
db:	CNVD	id:	CNVD-2025-29751	Trust: 0.6
db:	VULMON	id:	CVE-2023-20592	Trust: 0.1
db:	PACKETSTORM	id:	177057	Trust: 0.1
db:	PACKETSTORM	id:	177305	Trust: 0.1
db:	PACKETSTORM	id:	177304	Trust: 0.1

sources: CNVD: CNVD-2025-29751 // VULMON: CVE-2023-20592 // PACKETSTORM: 177057 // PACKETSTORM: 177305 // PACKETSTORM: 177304 // NVD: CVE-2023-20592

REFERENCES

url:	https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-3005	Trust: 1.1
url:	https://nvd.nist.gov/vuln/detail/cve-2023-20592	Trust: 0.9
url:	https://bugzilla.redhat.com/show_bug.cgi?id=2244590	Trust: 0.3
url:	https://access.redhat.com/security/updates/classification/#moderate	Trust: 0.3
url:	https://access.redhat.com/articles/11258	Trust: 0.3
url:	https://github.com/cispa/cachewarp	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2024:0753	Trust: 0.1
url:	https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0753.json	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2024:0979	Trust: 0.1
url:	https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0979.json	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2024:0978	Trust: 0.1
url:	https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0978.json	Trust: 0.1

sources: CNVD: CNVD-2025-29751 // VULMON: CVE-2023-20592 // PACKETSTORM: 177057 // PACKETSTORM: 177305 // PACKETSTORM: 177304 // NVD: CVE-2023-20592

CREDITS

Red Hat

Trust: 0.3

sources: PACKETSTORM: 177057 // PACKETSTORM: 177305 // PACKETSTORM: 177304

SOURCES

db:	CNVD	id:	CNVD-2025-29751
db:	VULMON	id:	CVE-2023-20592
db:	PACKETSTORM	id:	177057
db:	PACKETSTORM	id:	177305
db:	PACKETSTORM	id:	177304
db:	NVD	id:	CVE-2023-20592

LAST UPDATE DATE

2025-12-19T22:58:13.256000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-29751	date:	2025-12-03T00:00:00
db:	VULMON	id:	CVE-2023-20592	date:	2023-11-14T00:00:00
db:	NVD	id:	CVE-2023-20592	date:	2023-11-28T18:04:11.733

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-29751	date:	2025-12-03T00:00:00
db:	VULMON	id:	CVE-2023-20592	date:	2023-11-14T00:00:00
db:	PACKETSTORM	id:	177057	date:	2024-02-09T16:35:56
db:	PACKETSTORM	id:	177305	date:	2024-02-27T14:57:53
db:	PACKETSTORM	id:	177304	date:	2024-02-27T14:57:45
db:	NVD	id:	CVE-2023-20592	date:	2023-11-14T19:15:16.030