A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-firmware-mwifiexUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-atherosUpgrade kernel-firmware-brcmUpgrade kernel-firmware-tiUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-realtekUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-platformUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-radeonUpgrade kernel-firmware-marvellUpgrade kernel-firmware-presteraUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-nfpUpgrade ucode-amdUpgrade kernel-firmwareUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-soundUpgrade kernel-firmware-networkUpgrade kernel-firmware-serialUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-i915Upgrade kernel-firmware-dpaa2Upgrade kernel-firmware-ath10kUpgrade kernel-firmware-qcomUpgrade kernel-firmware-intelUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-mediaUpgrade kernel-firmware-all | Oct 26, 2022 | May 11, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub