Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-31315

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD 3rd Gen AMD EPYC™ Processors

Default version status: unaffected

  • various to < Milan PI 1.0.0.Daffected

AMD 1st Gen AMD EPYC™ Processors

Default version status: affected

  • various to < Naples PI 1.0.0.Maffected

AMD 2nd Gen AMD EPYC™ Processors

Default version status: affected

  • various to < Rome PI 1.0.0.Jaffected

AMD 4th Gen AMD EPYC™ Processors

Default version status: affected

  • various to < Genoa PI 1.0.0.Cunaffected

AMD AMD EPYC™ Embedded 3000

Default version status: affected

  • variousaffected

AMD AMD EPYC™ Embedded 7002

Default version status: affected

  • variousaffected

AMD AMD EPYC™ Embedded 7003

Default version status: affected

  • variousaffected

AMD AMD EPYC™ Embedded 9003

Default version status: affected

  • various to < EmbGenoaPI 1.0.0.7unaffected

AMD AMD Ryzen™ Embedded R1000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ Embedded R2000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ Embedded 5000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ Embedded 7000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ Embedded V1000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ Embedded V3000

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • variousaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • various to < ComboAM4v2PI 1.2.0.cbunaffected

AMD AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics

Default version status: affected

  • various to < ComboAM4v2PI 1.2.0.cbunaffected

AMD AMD Ryzen™ 7000 Series Desktop Processors

Default version status: affected

  • various to < ComboAM5PI 1.2.0.1affected

AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • various to < ComboAM4v2PI 1.2.0.cbaffected

AMD AMD Ryzen™ Threadripper™ 3000 Series Processors

Default version status: affected

  • various to < CastlePeakPI-SP3r3 1.0.0.Baffected

AMD AMD Ryzen™ Threadripper™ PRO Processors

Default version status: affected

  • various to < ChagallWSPI-sWRX8 1.0.0.8affected
  • various to < CastlePeakWSPI-sWRX8 1.0.0.Dunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: affected

  • various to < ChagallWSPI-sWRX8 1.0.0.8unaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • various to < Picasso-FP5 1.0.1.2unaffected
  • various to < PollockPI-FT5 1.0.0.8unaffected

AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Default version status: affected

  • various to < Picasso-FP5 1.0.1.2affected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • various to < RenoirPI-FP6 1.0.0.Eunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • various to < CezannePI-FP6 1.0.1.1unaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • various to < CezannePI-FP6affected

AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • various to < PhoenixPI-FP8-FP7 1.1.0.3unaffected

AMD AMD Ryzen™ 7045 Series Mobile Processors

Default version status: affected

  • various to < DragonRangeFL1 1.0.0.3eunaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • various to < RembrandtPI-FP7 1.0.0.Bunaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • various to < MendocinoPI-FT6 1.0.0.7affected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • various to < RembrandtPI-FP7 1.0.0.Bunaffected

AMD AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics

Default version status: affected

  • various to < ComboAM5PI 1.2.0.1unaffected

References