Skip to content
Fencer Vulns
medium 6.5

CVE-2023-20592 json

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache…

published 2023-11-14 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-24771

cvss
6.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 63%
public exploits
0
none known

Summary

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.

Patch / fix

  • amd epyc_7763_firmware milanpi_1.0.0.c
  • amd epyc_7713p_firmware milanpi_1.0.0.c
  • amd epyc_7713_firmware milanpi_1.0.0.c
  • amd epyc_7663p_firmware milanpi_1.0.0.c
  • amd epyc_7663_firmware milanpi_1.0.0.c
  • amd epyc_7643p_firmware milanpi_1.0.0.c
  • amd epyc_7773x_firmware milanpi_1.0.0.c
  • amd epyc_7643_firmware milanpi_1.0.0.c
  • amd epyc_7573x_firmware milanpi_1.0.0.c
  • amd epyc_75f3_firmware milanpi_1.0.0.c
  • amd epyc_7543p_firmware milanpi_1.0.0.c
  • amd epyc_7543_firmware milanpi_1.0.0.c
  • amd epyc_7513_firmware milanpi_1.0.0.c
  • amd epyc_7473x_firmware milanpi_1.0.0.c
  • amd epyc_7453_firmware milanpi_1.0.0.c
  • amd epyc_74f3_firmware milanpi_1.0.0.c
  • amd epyc_7443p_firmware milanpi_1.0.0.c
  • amd epyc_7443_firmware milanpi_1.0.0.c
  • amd epyc_7413_firmware milanpi_1.0.0.c
  • amd epyc_7373x_firmware milanpi_1.0.0.c
  • amd64-microcode Debian 12 3.20230719.1~deb12u1
  • amd64-microcode Debian 14, Debian 13 3.20230719.1

debian advisories DEBIAN-CVE-2023-20592

  • linux-firmware RHEL 8 20240111-121.gitb3132c18.el8
  • iwl100-firmware RHEL 8 39.31.5.1-121.el8.1
  • iwl105-firmware RHEL 8 18.168.6.1-121.el8.1
  • iwl135-firmware RHEL 8 18.168.6.1-121.el8.1
  • iwl1000-firmware RHEL 8 1:39.31.5.1-121.el8.1
  • iwl2000-firmware RHEL 8 18.168.6.1-121.el8.1
  • iwl2030-firmware RHEL 8 18.168.6.1-121.el8.1
  • iwl3160-firmware RHEL 8 1:25.30.13.0-121.el8.1

red hat advisories RHSA-2024:4575RHSA-2024:3178RHSA-2024:1112RHSA-2024:0979RHSA-2024:0978RHSA-2024:0753

  • kernel-firmware SLE Module for Basesystem 15 SP5, SLE Micro 5.5, openSUSE Leap 15.5 20230724-150500.3.9.1
  • kernel-firmware SLE Module for Basesystem 15 SP4, SLE Micro 5.4, SLE Micro 5.3 +3 more 20220509-150400.4.25.1
  • kernel-firmware SLES for SAP 12 SP5, SLES 12 SP5 20190618-5.34.1
  • kernel-firmware SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Micro 5.2 +4 more 20210208-150300.4.19.1
  • kernel-firmware SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES 15 SP2-LTSS +3 more 20200107-150100.3.40.1

suse advisories SUSE-SU-2024:2376-1SUSE-SU-2023:4665-1SUSE-SU-2023:4664-1SUSE-SU-2023:4660-1SUSE-SU-2023:4655-1SUSE-SU-2023:4654-1

  • kernel-firmware-ath12k openSUSE Tumbleweed 20250206-1.1
  • kernel-firmware openSUSE Tumbleweed 20231128-1.1

opensuse advisories openSUSE-SU-2025:14772-1openSUSE-SU-2024:13475-1

  • linux-firmware AlmaLinux 8 20240111-121.gitb3132c18.el8
  • iwl100-firmware AlmaLinux 8 39.31.5.1-121.el8.1
  • iwl105-firmware AlmaLinux 8 18.168.6.1-121.el8.1
  • iwl135-firmware AlmaLinux 8 18.168.6.1-121.el8.1
  • iwl1000-firmware AlmaLinux 8 1:39.31.5.1-121.el8.1
  • iwl2000-firmware AlmaLinux 8 18.168.6.1-121.el8.1
  • iwl2030-firmware AlmaLinux 8 18.168.6.1-121.el8.1
  • iwl3160-firmware AlmaLinux 8 1:25.30.13.0-121.el8.1

almalinux advisories ALSA-2024:3178

  • linux-firmware Rocky Linux 8 20240111-121.gitb3132c18.el8

rocky linux advisories RLSA-2024:3178

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-20592 updated cvss 5.3

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

  • Red Hat Enterprise Linux 6 linux-firmware
    affected: workaround, no fix available
  • Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware 39.31.5.1-121.el8.1, iwl5150-firmware 8.24.2.2-121.el8.1, iwl1000-firmware 39.31.5.1-121.el8.1, iwl105-firmware 18.168.6.1-121.el8.1, iwl135-firmware 18.168.6.1-121.el8.1, iwl3945-firmware 15.32.2.9-121.el8.1, +36 more
    fixed: vendor fix RHSA-2024:3178
  • Red Hat Enterprise Linux BaseOS (v. 9) linux-firmware 20230310-135.el9_2, iwl100-firmware 39.31.5.1-135.el9_2, iwl5150-firmware 8.24.2.2-135.el9_2, iwl1000-firmware 39.31.5.1-135.el9_2, iwl105-firmware 18.168.6.1-135.el9_2, iwl135-firmware 18.168.6.1-135.el9_2, +11 more
    fixed: vendor fix RHSA-2023:5068
  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) iwl100-firmware 39.31.5.1-102.el8_2.1, iwl5150-firmware 8.24.2.2-102.el8_2.1, iwl1000-firmware 39.31.5.1-102.el8_2.1, iwl105-firmware 18.168.6.1-102.el8_2.1, iwl135-firmware 18.168.6.1-102.el8_2.1, iwl3945-firmware 15.32.2.9-102.el8_2.1, +15 more
    fixed: vendor fix RHSA-2024:4575
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4) iwl100-firmware 39.31.5.1-105.el8_4.1, iwl5150-firmware 8.24.2.2-105.el8_4.1, iwl1000-firmware 39.31.5.1-105.el8_4.1, iwl105-firmware 18.168.6.1-105.el8_4.1, iwl135-firmware 18.168.6.1-105.el8_4.1, iwl3945-firmware 15.32.2.9-105.el8_4.1, +15 more Red Hat Enterprise Linux BaseOS E4S (v.8.4) iwl100-firmware 39.31.5.1-105.el8_4.1, iwl5150-firmware 8.24.2.2-105.el8_4.1, iwl1000-firmware 39.31.5.1-105.el8_4.1, iwl105-firmware 18.168.6.1-105.el8_4.1, iwl135-firmware 18.168.6.1-105.el8_4.1, iwl3945-firmware 15.32.2.9-105.el8_4.1, +15 more
    fixed: vendor fix RHSA-2024:0561
  • Red Hat Enterprise Linux BaseOS EUS (v.8.6) iwl100-firmware 39.31.5.1-114.el8_6.1, iwl5150-firmware 8.24.2.2-114.el8_6.1, iwl1000-firmware 39.31.5.1-114.el8_6.1, iwl105-firmware 18.168.6.1-114.el8_6.1, iwl135-firmware 18.168.6.1-114.el8_6.1, iwl3945-firmware 15.32.2.9-114.el8_6.1, +15 more
    fixed: vendor fix RHSA-2024:1112
  • Red Hat Enterprise Linux BaseOS EUS (v.9.0) linux-firmware 20220209-128.el9_0, iwl100-firmware 39.31.5.1-128.el9_0, iwl5150-firmware 8.24.2.2-128.el9_0, iwl1000-firmware 39.31.5.1-128.el9_0, iwl105-firmware 18.168.6.1-128.el9_0, iwl135-firmware 18.168.6.1-128.el9_0, +11 more
    fixed: vendor fix RHSA-2023:5607
  • Red Hat Enterprise Linux BaseOS TUS (v.8.4) iwl100-firmware 39.31.5.1-105.el8_4.1, iwl5150-firmware 8.24.2.2-105.el8_4.1, iwl1000-firmware 39.31.5.1-105.el8_4.1, iwl105-firmware 18.168.6.1-105.el8_4.1, iwl135-firmware 18.168.6.1-105.el8_4.1, iwl3945-firmware 15.32.2.9-105.el8_4.1, +15 more
    fixed: vendor fix RHSA-2024:0561
show 4 more
  • Red Hat Enterprise Linux Client (v. 7) iwl100-firmware 39.31.5.1-82.el7_9, iwl5150-firmware 8.24.2.2-82.el7_9, iwl1000-firmware 39.31.5.1-82.el7_9, iwl105-firmware 18.168.6.1-82.el7_9, iwl135-firmware 18.168.6.1-82.el7_9, iwl3945-firmware 15.32.2.9-82.el7_9, +11 more Red Hat Enterprise Linux Server (v. 7) iwl100-firmware 39.31.5.1-82.el7_9, iwl5150-firmware 8.24.2.2-82.el7_9, iwl1000-firmware 39.31.5.1-82.el7_9, iwl105-firmware 18.168.6.1-82.el7_9, iwl135-firmware 18.168.6.1-82.el7_9, iwl3945-firmware 15.32.2.9-82.el7_9, +11 more
    fixed: vendor fix RHSA-2024:0753
  • Red Hat Enterprise Linux Server AUS (v. 7.6) iwl100-firmware 39.31.5.1-69.3.el7_6, iwl3160-firmware 22.0.7.0-69.3.el7_6, iwl5150-firmware 8.24.2.2-69.3.el7_6, iwl7260-firmware 22.0.7.0-69.3.el7_6, iwl7265-firmware 22.0.7.0-69.3.el7_6, iwl1000-firmware 39.31.5.1-69.3.el7_6, +12 more
    fixed: vendor fix RHSA-2024:0978
  • Red Hat Enterprise Linux Server AUS (v. 7.7) iwl100-firmware 39.31.5.1-75.el7_7, iwl3160-firmware 22.0.7.0-75.el7_7, iwl5150-firmware 8.24.2.2-75.el7_7, iwl7260-firmware 22.0.7.0-75.el7_7, iwl7265-firmware 22.0.7.0-75.el7_7, iwl1000-firmware 39.31.5.1-75.el7_7, +12 more
    fixed: vendor fix RHSA-2024:0979
  • Red Hat Enterprise Linux Workstation (v. 7) iwl100-firmware 39.31.5.1-82.el7_9, iwl5150-firmware 8.24.2.2-82.el7_9, iwl1000-firmware 39.31.5.1-82.el7_9, iwl105-firmware 18.168.6.1-82.el7_9, iwl135-firmware 18.168.6.1-82.el7_9, iwl3945-firmware 15.32.2.9-82.el7_9, +11 more
    fixed: vendor fix RHSA-2024:0753

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

1.02% chance of exploitation in the next 30 days, higher than 63% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

  • AMD 1st Gen AMD EPYC™ Processors
  • AMD 2nd Gen AMD EPYC™ Processors
  • AMD 3rd Gen AMD EPYC™ Processors

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.