Vulnerability in Amd 3rd Gen Epyc™ Processors
CVE-2023-31347
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
EPSS: 0.000 (14.6th percentile) — read the EPSS interpretation.
Affected products
- Amd 3rd Gen Epyc™ Processors — versions various
- Amd 4th Gen Epyc™ Processors — versions various
References
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 (vendor-advisory)