CVE-2023-20569

Note

Priority reason:
Unprivileged local attackers may use this vulnerability to extract confidential data.
The listed microcode revisions for 3rd Gen AMD EPYC processors in
AMD-SB-7005 were provided to the upstream linux-firmware repo in commit
b250b32ab1d044953af2dc5e790819a7703b7ee6 whilst the 4th Gen microcode was
provided in commit f2eb058afc57348cde66852272d6bf11da1eef8f.
This is not planned to be fixed for the amd64-microcode package in Ubuntu
14.04 as that release was already outside of the LTS timeframe when this
hardware platform was launched.

Parameter	Value
Base score	4.7
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2023-20569

From the Ubuntu Security Team

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
amd64-microcode Launchpad, Ubuntu, Debian	bionic	Released (3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (3.20191218.1ubuntu1.2)
	jammy	Released (3.20191218.1ubuntu2.2)
	lunar	Released (3.20220411.1ubuntu3.2)
	mantic	Released (3.20230808.1.1ubuntu1)
	noble	Released (3.20230808.1.1ubuntu1)
	trusty	Ignored (no real-world users)
	upstream	Needs triage
	xenial	Released (3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	Patches: upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=b250b32ab1d044953af2dc5e790819a7703b7ee6 upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=f2eb058afc57348cde66852272d6bf11da1eef8f
linux Launchpad, Ubuntu, Debian	bionic	Needed
	focal	Needed
	jammy	Released (5.15.0-86.96)
	lunar	Released (6.2.0-34.34)
	mantic	Not vulnerable (6.5.0-5.5)
	noble	Not vulnerable (6.5.0-9.9)
	trusty	Needed
	upstream	Released (6.5~rc6)
	xenial	Needed
	Patches: Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by fb3bd914b3ec28f5fb697ac55c4846ac2d542855 Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by 79113e4060aba744787a81edb9014f2865193854 Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by 1b5277c0ea0b247393a9c426769fde18cff5e2f6 Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by 233d6f68b98d480a7c42ebe78c38f79d44741ca9 Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by d893832d0e1ef41c72cdae444268c1d64a2be8ad
linux-allwinner Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Ignored (end of kernel support, was needs-triage)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Released (6.5~rc6)
	xenial	Does not exist
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support, was needs-triage)
	lunar	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Released (6.5~rc6)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Needed
	focal	Needed