Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2023-31356

Incomplete system memory cleanup in SEV firmware could

Description

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7003 Processors

Default version status: affected

  • MilanPI 1.0.0.Cunaffected

AMD AMD EPYC™ 9004 Processors

Default version status: affected

  • GenoaPI 1.0.0.Bunaffected

AMD AMD EPYC™ Embedded 7003

Default version status: affected

  • "EmbMilanPI-SP3 1.0.0.8"unaffected

AMD AMD EPYC™ Embedded 9004

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.6unaffected

References