VDB

DEBIAN-CVE-2023-20592

DEBIAN-CVE-2023-20592 PUBLISHED CVSS 6.5 MEDIUM

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Debian:12amd64-microcode0.20120117-1, 3.20191218.1, 3.20191218.1
Debian:11amd64-microcode*, 0, 0.20120117-1
Debian:14amd64-microcode1.20120910-3, 0.20120117-1, 1.20120117-2
Debian:13amd64-microcode0, 0.20120117-1, 1.20120117-1

Timeline

  • Nov 14, 2023 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›