Summary
Tavis Ormandy discovered that some AMD processors did not properly handle
speculative execution of certain vector register instructions. A local attacker
could use this to expose sensitive information.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | amd64-microcode | 3.20191218.1ubuntu1.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | amd64-microcode | 3.20191218.1ubuntu2.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | amd64-microcode | 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | amd64-microcode | 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1 |
Vulnerabilities 1
-
Unscored —CVE-2023-20593 Public exploit
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access …
References
-
report
https://ubuntu.com/security/CVE-2023-20593