CVE-2022-23823
hw: cpu: cryptographic leaks via frequency scaling attacks(AMD)
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 14, 2022
Updated · November 22, 2025
Description
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
For mitigations please refer to the AMD Security Bulletin at https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1038
CVSS / CWE
CVSS 3.1 · 6.3CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-1240 · Use of a Cryptographic Primitive with a Risky Implementation