CVE Vulnerabilities

CVE-2023-31346

Published: Feb 13, 2024 | Modified: Oct 24, 2024
CVSS 3.x
6
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
4.4 MODERATE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Ubuntu
MEDIUM

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

Affected Software

Name Vendor Start Version End Version
Epyc_7773x_firmware Amd * milanpi_1.0.0.c (excluding)
Red Hat Enterprise Linux 8 RedHat linux-firmware-0:20240610-122.git90df68d2.el8_10 *
Red Hat Enterprise Linux 8.2 Advanced Update Support RedHat linux-firmware-0:20240715-102.2.git4c8fb21e.el8_2 *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support RedHat linux-firmware-0:20240610-106.1.git90df68d2.el8_4 *
Red Hat Enterprise Linux 8.4 Telecommunications Update Service RedHat linux-firmware-0:20240610-106.1.git90df68d2.el8_4 *
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions RedHat linux-firmware-0:20240610-106.1.git90df68d2.el8_4 *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support RedHat linux-firmware-0:20240610-114.1.git90df68d2.el8_6 *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service RedHat linux-firmware-0:20240610-114.1.git90df68d2.el8_6 *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions RedHat linux-firmware-0:20240610-114.1.git90df68d2.el8_6 *
Red Hat Enterprise Linux 8.8 Extended Update Support RedHat linux-firmware-0:20240610-118.1.git90df68d2.el8_8 *
Red Hat Enterprise Linux 9 RedHat linux-firmware-0:20240603-143.1.el9_4 *
Red Hat Enterprise Linux 9.2 Extended Update Support RedHat linux-firmware-0:20240603-138.1.el9_2 *
Linux-firmware Ubuntu bionic *
Linux-firmware Ubuntu mantic *
Linux-firmware Ubuntu trusty *
Linux-firmware Ubuntu trusty/esm *
Linux-firmware Ubuntu xenial *

References