Skip to content
Sign in
7.5 High

CVE-2023-31315 Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…

Description

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Affected products and versions

Product Affected versions Fixed in
3rd Gen AMD EPYC™ Processors Versions not published
1st Gen AMD EPYC™ Processors Versions not published
2nd Gen AMD EPYC™ Processors Versions not published
4th Gen AMD EPYC™ Processors Versions not published
AMD EPYC™ Embedded 3000 Versions not published
AMD EPYC™ Embedded 7002 Versions not published
AMD EPYC™ Embedded 7003 Versions not published
AMD EPYC™ Embedded 9003 Versions not published
AMD Ryzen™ Embedded R1000 Versions not published
Show the 59 other branches
Product Affected versions Fixed in
AMD Ryzen™ Embedded R2000 Versions not published
AMD Ryzen™ Embedded 5000 Versions not published
AMD Ryzen™ Embedded 7000 Versions not published
AMD Ryzen™ Embedded V1000 Versions not published
AMD Ryzen™ Embedded V2000 Versions not published
AMD RyzenTM Embedded V3000 Versions not published
AMD Ryzen™ 3000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 7000 Series Desktop Processors Versions not published
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors Versions not published
AMD Ryzen™ Threadripper™ PRO Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7045 Series Mobile Processors Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics Versions not published
1st_gen_amd_epyc_processors Versions not published
3rd_gen_amd_epyc_processors Versions not published
2nd_gen_amd_epyc_processors Versions not published
ryzen_3000_series_desktop_processors Versions not published
4th_gen_amd_epyc_processors Versions not published
epyc_embedded_3000 Versions not published
epyc_embedded_7002 Versions not published
epyc_embedded_7003 Versions not published
epyc_embedded_9003 Versions not published
ryzen_embedded_r1000 Versions not published
ryzen_embedded_r2000 Versions not published
ryzen_embedded_7000 Versions not published
ryzen_embedded_5000 Versions not published
ryzen_embedded_v1000 Versions not published
ryzen_embedded_v3000 Versions not published
ryzen_embedded_v2000 Versions not published
ryzen_7040_series_mobile_processors_with_radeon_graphics Versions not published
ryzen_5000_series_desktop_processors Versions not published
ryzen_5000_series_desktop_processors_with_radeon_graphics Versions not published
ryzen_7000_desktop_processors Versions not published
ryzen_4000_series_desktop_processors_with_radeon_graphics Versions not published
ryzen_threadripper_3000_series_processors Versions not published
ryzen_threadripper_pro_processors Versions not published
ryzen_threadripper_pro_3000wx_series_processors Versions not published
athlon_3000_series_mobile_processors_with_radeon_graphics Versions not published
ryzen_3000_series_desktop_processors_with_radeon_graphics Versions not published
ryzen_4000_series_mobile_processors_with_radeon_graphics Versions not published
ryzen_5000_series_mobile_processors_with_radeon_graphics Versions not published
ryzen_7030_series-mobile_processors_with_radeon_graphics Versions not published
ryzen_7045_series_mobile_processors Versions not published
ryzen_6000_processors_with_radeongraphics Versions not published
ryzen_7020_processors_with_radeongraphics Versions not published
ryzen_7035_processors_with_radeongraphics Versions not published
ryzen_8000_series_processors_with_radeongraphics Versions not published

Other CVEs of 3rd Gen AMD EPYC™ Processors

The 25 CVEs of 3rd Gen AMD EPYC™ Processors →
CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… 7.4 High CVE-2024-21980 Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a… 7.9 High CVE-2024-21978 Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially… 6.0 Medium CVE-2023-31355 Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC… 6.0 Medium
Track this CVE