Rapid7

vulnerability

Oracle Linux: CVE-2023-20593: ELSA-2023-12654: linux-firmware security update (CRITICAL) (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
Jul 25, 2023
Added
Jul 26, 2023
Modified
Dec 3, 2025

Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances.

Solution

oracle-linux-upgrade-kernel

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.