Vulnerability in Amd 1st Gen Epyc™ Processors
CVE-2022-27672
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
EPSS: 0.003 (20.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Amd 1st Gen Epyc™ Processors — versions Contact your OS vendor
- Amd 2nd Gen Epyc™ Processors — versions Contact your OS vendor
- Amd 2nd Gen Ryzen™ Threadripper™ Processors — versions Contact your OS vendor
- Amd 3rd Gen Ryzen™ Threadripper™ Processors — versions Contact your OS vendor
- Amd 7th Generation A-series Apus — versions Contact your OS vendor
- Amd A10-9600p
- Amd A10-9600p_firmware
- Amd A10-9630p
- Amd A10-9630p_firmware
- Amd A12-9700p
References
- psirt@amd.com (vendor-advisory, Mitigation, Vendor Advisory)
- psirt@amd.com
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2022-27672?
- CVE-2022-27672 is a medium-severity vulnerability in Amd 1st Gen Epyc™ Processors. CVSS score: 4.7/10. Published 2023-03-01.
- How severe is CVE-2022-27672?
- Medium severity. CVSS v3 base score is 4.7 out of 10.