Potential Bypass of Integrity and Availability Protections in AMD SPI Protection Feature
CVE-2023-20579

6MEDIUM

Key Information:

Vendor
AMD
Status
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
AMD Ryzen™ 7000 Series Desktop Processor
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Vendor
CVE Published:
13 February 2024

Summary

The vulnerability in AMD's SPI protection feature is associated with improper access controls that may enable a user with Ring0 (kernel mode) privileges to bypass security measures. This bypass could lead to significant risks, including potential loss of data integrity and system availability. Affected users should remain vigilant and apply recommended security updates as outlined in vendor advisories.

Affected Version(s)

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics x86 various

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics x86 various

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics x86 various

References

https://www.amd.com/en/corporate/product-security/bulleti...
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.