CVE-2023-20564
hw: amd: RyzenTM Master allow memory reads/writes potentially leading to confidentiality threat
Loading…
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 8, 2023
Updated · November 22, 2025
Description
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD RyzenTM Master may permit a privileged attacker to perform memory reads and writes, potentially leading to a loss of confidentiality or arbitrary kernel execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Please contact AMD support for updates.
CVSS / CWE
CVSS 3.1 · 8.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE not specified