VDB
UBUNTU-CVE-2023-20569
UBUNTU-CVE-2023-20569
PUBLISHED
CVSS 4.699999809265137 MEDIUM
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1053.58, 5.15.0-1059.64, 5.15.0-1058.63 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1037.43, 5.15.0-1039.45, 5.15.0-1040.46 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | 5.19.0-1016.18~22.04.1, 5.19.0-1015.17~22.04.1, 5.19.0-1018.20~22.04.1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1045.45, 5.15.0-1044.44, 5.15.0-1043.43 |
| Ubuntu:18.04:LTS | linux-hwe | 5.3.0-75.71, 5.3.0-61.55~18.04.1, 5.3.0-62.56~18.04.1 |
| Ubuntu:22.04:LTS | linux-ibm | 0, 5.15.0-1002.2, 5.15.0-1003.3 |
| Ubuntu:Pro:16.04:LTS | linux-aws-hwe | 4.15.0-1142.154~16.04.1, 4.15.0-1198.211~16.04.1, 4.15.0-1197.210~16.04.1 |
| Ubuntu:Pro:20.04:LTS | linux-oracle | 5.4.0-1154.164, 5.4.0-1119.128, 5.4.0-1120.129 |
| Ubuntu:20.04:LTS | linux-hwe-5.15 | 5.15.0-50.56~20.04.1, 5.15.0-48.54~20.04.1, 5.15.0-46.49~20.04.1 |
| Ubuntu:Pro:20.04:LTS | linux-aws | 5.4.0-1059.62, 5.4.0-1166.177, 5.4.0-1165.176 |
| Ubuntu:20.04:LTS | linux-oem-5.13 | 5.13.0-1014.18, 5.13.0-1010.11, 5.13.0-1012.16 |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | linux-gcp-fips | 5.15.0-1048.56+fips1, 0 |
| Ubuntu:Pro:18.04:LTS | linux-gcp-4.15 | 4.15.0-1135.151, 4.15.0-1134.150, 4.15.0-1131.147 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1060.66, 5.15.0-1006.8, 5.15.0-1007.9 |
| Ubuntu:Pro:18.04:LTS | linux-kvm | 4.15.0-1143.148, 4.15.0-1180.185, 4.15.0-1179.184 |
| Ubuntu:20.04:LTS | linux-gcp-5.8 | 0, 5.8.0-1032.34~20.04.1, 5.8.0-1035.37~20.04.1 |
| Ubuntu:20.04:LTS | linux-oracle-5.11 | 5.11.0-1021.22~20.04.1, 5.11.0-1020.21~20.04.1, 5.11.0-1019.20~20.04.1 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-azure-fips | 4.15.0-2037.41, 4.15.0-2038.42, 4.15.0-2039.43 |
| Ubuntu:22.04:LTS | linux-realtime | 5.15.0-1032.35, 0 |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | 5.8.0-1038.39~20.04.1, 5.8.0-1037.38~20.04.1, 5.8.0-1034.35~20.04.2 |
…and 145 more
Timeline
- Aug 8, 2023 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Distribution Patch
- Oct 31, 2026 Security Advisory
References
- https://ubuntu.com/security/CVE-2023-20569 report
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html report
- https://lore.kernel.org/linux-firmware/20230718231959.3163407-1-john.allen@amd.com/T/#meaa8272d3d5799ffebc729eeaaabb3a14d32665f report
- https://ubuntu.com/security/notices/USN-6319-1 advisory
- https://ubuntu.com/security/notices/USN-6412-1 advisory
- https://ubuntu.com/security/notices/USN-6415-1 advisory
- https://ubuntu.com/security/notices/USN-6416-1 advisory
- https://ubuntu.com/security/notices/USN-6416-2 advisory
- https://ubuntu.com/security/notices/USN-6416-3 advisory
- https://ubuntu.com/security/notices/USN-6445-1 advisory
- https://ubuntu.com/security/notices/USN-6445-2 advisory
- https://ubuntu.com/security/notices/USN-6466-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-20569 report