CVE-2023-31347
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...
4.9 Medium
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
0.46%Up 0.4 points since Feb 14, 2024
What each source reports
NVD Score used
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
- Record
CVE-2023-31347- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-682
- Updated
- 2026-11-02
CVE List
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
- Record
CVE-2023-31347- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-682
- Updated
- 2026-11-02
EUVDEUVD-2023-35658
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
- Record
EUVD-2023-35658- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-ggv6-7vfj-r2fw
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
- Record
GHSA-ggv6-7vfj-r2fw- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-682
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-31347
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
- Record
UBUNTU-CVE-2023-31347- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Affected products
- amd 3rd gen amd epyc™ processors
- amd 4th gen amd epyc™ processors
- amd epyc 7203 firmware
- amd epyc 7203p firmware
- amd epyc 72f3 firmware
- amd epyc 7303 firmware
- amd epyc 7303p firmware
- amd epyc 7313 firmware
- amd epyc 7313p firmware
- amd epyc 7343 firmware
- amd epyc 7373x firmware
- amd epyc 73f3 firmware
Show 52 moreShow less
- amd epyc 7413 firmware
- amd epyc 7443 firmware
- amd epyc 7443p firmware
- amd epyc 7453 firmware
- amd epyc 7473x firmware
- amd epyc 74f3 firmware
- amd epyc 7513 firmware
- amd epyc 7543 firmware
- amd epyc 7543p firmware
- amd epyc 7573x firmware
- amd epyc 75f3 firmware
- amd epyc 7643 firmware
- amd epyc 7643p firmware
- amd epyc 7663 firmware
- amd epyc 7663p firmware
- amd epyc 7713 firmware
- amd epyc 7713p firmware
- amd epyc 7763 firmware
- amd epyc 7773x firmware
- amd epyc 8024p firmware
- amd epyc 8024pn firmware
- amd epyc 8124p firmware
- amd epyc 8124pn firmware
- amd epyc 8224p firmware
- amd epyc 8224pn firmware
- amd epyc 8324p firmware
- amd epyc 8324pn firmware
- amd epyc 8434p firmware
- amd epyc 8434pn firmware
- amd epyc 8534p firmware
- amd epyc 8534pn firmware
- amd epyc 9124 firmware
- amd epyc 9174f firmware
- amd epyc 9184x firmware
- amd epyc 9224 firmware
- amd epyc 9254 firmware
- amd epyc 9274f firmware
- amd epyc 9334 firmware
- amd epyc 9354 firmware
- amd epyc 9354p firmware
- amd epyc 9374f firmware
- amd epyc 9384x firmware
- amd epyc 9454 firmware
- amd epyc 9454p firmware
- amd epyc 9474f firmware
- amd epyc 9534 firmware
- amd epyc 9554 firmware
- amd epyc 9554p firmware
- amd epyc 9634 firmware
- amd epyc 9654 firmware
- amd epyc 9654p firmware
- amd epyc 9684x firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-firmwareUbuntu:14.04:LTS |
All versions, plus listed versions 1.1161.1171.1181.1191.121 Show 26 moreShow less1.1221.1231.1241.1251.1261.1271.127.21.127.31.127.41.127.51.127.61.127.71.127.81.127.101.127.111.127.121.127.131.127.141.127.151.127.161.127.181.127.191.127.201.127.221.127.231.127.24 |
None known |
linux-firmwareUbuntu:16.04:LTS |
All versions, plus listed versions 1.1491.1501.1521.1531.154 Show 24 moreShow less1.1551.1561.1571.157.11.157.21.157.31.157.41.157.51.157.61.157.81.157.101.157.111.157.121.157.131.157.141.157.151.157.161.157.171.157.181.157.191.157.201.157.211.157.221.157.23 |
None known |
linux-firmwareUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.1691.1701.1711.1721.173 Show 17 moreShow less1.173.11.173.21.173.31.173.51.173.61.173.81.173.91.173.121.173.131.173.141.173.151.173.161.173.171.173.181.173.191.173.201.173.21 |
None known |
linux-firmwareUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.1831.183.11.183.21.1841.185 Show 34 moreShow less1.1861.1871.187.11.187.21.187.31.187.41.187.61.187.71.187.81.187.91.187.101.187.111.187.121.187.141.187.151.187.161.187.171.187.191.187.201.187.231.187.241.187.251.187.261.187.271.187.291.187.301.187.311.187.321.187.331.187.341.187.351.187.361.187.381.187.39 |
None known |
linux-firmwareUbuntu:22.04:LTS |
All versions, plus listed versions 1.2011.2021.20420220124.git0c6a7b3b-0ubuntu120220217.git6342082c-0ubuntu1 Show 39 moreShow less20220217.git6342082c-0ubuntu320220302.gitee0667aa-0ubuntu120220314.gitcd01f857-0ubuntu120220314.gitcd01f857-0ubuntu220220329.git681281e4-0ubuntu120220329.git681281e4-0ubuntu320220329.git681281e4-0ubuntu3.220220329.git681281e4-0ubuntu3.320220329.git681281e4-0ubuntu3.420220329.git681281e4-0ubuntu3.520220329.git681281e4-0ubuntu3.620220329.git681281e4-0ubuntu3.720220329.git681281e4-0ubuntu3.920220329.git681281e4-0ubuntu3.1020220329.git681281e4-0ubuntu3.1120220329.git681281e4-0ubuntu3.1220220329.git681281e4-0ubuntu3.1320220329.git681281e4-0ubuntu3.1420220329.git681281e4-0ubuntu3.1620220329.git681281e4-0ubuntu3.1720220329.git681281e4-0ubuntu3.1820220329.git681281e4-0ubuntu3.1920220329.git681281e4-0ubuntu3.2120220329.git681281e4-0ubuntu3.2220220329.git681281e4-0ubuntu3.2320220329.git681281e4-0ubuntu3.2420220329.git681281e4-0ubuntu3.2620220329.git681281e4-0ubuntu3.2920220329.git681281e4-0ubuntu3.3020220329.git681281e4-0ubuntu3.3120220329.git681281e4-0ubuntu3.3420220329.git681281e4-0ubuntu3.3520220329.git681281e4-0ubuntu3.3620220329.git681281e4-0ubuntu3.3720220329.git681281e4-0ubuntu3.3820220329.git681281e4-0ubuntu3.3920220329.git681281e4-0ubuntu3.4020220329.git681281e4-0ubuntu3.4120220329.git681281e4-0ubuntu3.42 |
None known |
linux-firmwareUbuntu:24.04:LTS |
All versions, plus listed versions 20230919.git3672ccab-0ubuntu2.120230919.git3672ccab-0ubuntu2.220240202.git36777504-0ubuntu120240318.git3b128b60-0ubuntu120240318.git3b128b60-0ubuntu2 Show 24 moreShow less20240318.git3b128b60-0ubuntu2.120240318.git3b128b60-0ubuntu2.220240318.git3b128b60-0ubuntu2.320240318.git3b128b60-0ubuntu2.420240318.git3b128b60-0ubuntu2.520240318.git3b128b60-0ubuntu2.620240318.git3b128b60-0ubuntu2.720240318.git3b128b60-0ubuntu2.920240318.git3b128b60-0ubuntu2.1020240318.git3b128b60-0ubuntu2.1120240318.git3b128b60-0ubuntu2.1220240318.git3b128b60-0ubuntu2.1320240318.git3b128b60-0ubuntu2.1420240318.git3b128b60-0ubuntu2.1520240318.git3b128b60-0ubuntu2.1720240318.git3b128b60-0ubuntu2.1920240318.git3b128b60-0ubuntu2.2120240318.git3b128b60-0ubuntu2.2220240318.git3b128b60-0ubuntu2.2320240318.git3b128b60-0ubuntu2.2520240318.git3b128b60-0ubuntu2.2620240318.git3b128b60-0ubuntu2.2720240318.git3b128b60-0ubuntu2.2920240318.git3b128b60.0ubuntu3.1 |
None known |
linux-firmwareUbuntu:25.10 |
All versions, plus listed versions 20250317.git1d4c88ee-0ubuntu120250606.git3b75d677-0ubuntu120250701.gite2dad11e-0ubuntu120250711.git99d64b4f-0ubuntu120250807.gitb6b0b152-0ubuntu1 Show 10 moreShow less20250818.git07ed893d-0ubuntu120250901.git993ff19b-0ubuntu120250901.git993ff19b-0ubuntu1.220250901.git993ff19b-0ubuntu1.420250901.git993ff19b-0ubuntu1.520250901.git993ff19b-0ubuntu1.620250901.git993ff19b-0ubuntu1.720250901.git993ff19b-0ubuntu1.920250901.git993ff19b-0ubuntu1.1020250901.git993ff19b-0ubuntu1.11 |
None known |
linux-firmwareUbuntu:26.10 |
All versions, plus listed versions 20260319.git217ca6e4.1ubuntu20260709.git2c35b1ed.1ubuntu20260818.giteeed587f.1ubuntu20260911.giteeccccbe.1ubuntu20260915.git1522c78a.1ubuntu |
None known |
linux-firmwareUbuntu:26.04:LTS |
All versions, plus listed versions 20250901.git993ff19b-0ubuntu120251009.git46a6999a-0ubuntu120251029.git4f72031f-0ubuntu120251125.gitff6418d1-0ubuntu120260108.gitd86b47f7-0ubuntu1 Show 4 moreShow less20260123.git1b7b9f6c.0ubuntu20260227.gitd8e138dd.0ubuntu20260319.git217ca6e4.0ubuntu20260319.git217ca6e4.1ubuntu |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-31347 is a medium vulnerability (CVSS 4.9) in Amd 3rd Gen Amd Epyc™ Processors, published February 13, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. No source names a fixed version.