A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-firmware-qlogicUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-realtekUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-radeonUpgrade kernel-firmware-presteraUpgrade kernel-firmware-marvellUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-brcmUpgrade kernel-firmware-atherosUpgrade kernel-firmware-tiUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-platformUpgrade kernel-firmware-soundUpgrade ucode-amdUpgrade kernel-firmware-allUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-dpaa2Upgrade kernel-firmware-i915Upgrade kernel-firmware-nfpUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-mediaUpgrade kernel-firmwareUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-serialUpgrade kernel-firmware-networkUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-qcomUpgrade kernel-firmware-intel | Oct 26, 2022 | May 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub