{"id":"CVE-2023-31347","aliases":["EUVD-2023-35658","GHSA-ggv6-7vfj-r2fw","UBUNTU-CVE-2023-31347"],"status":"published","title":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause...","description":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause a\nguest to observe an incorrect TSC when Secure TSC is enabled potentially\nresulting in a loss of guest integrity.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0046,"percentile":0.40127,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-682"],"published":"2024-02-13T19:18:51Z","modified":"2026-10-17T12:56:05Z","affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.116","1.117","1.118","1.119","1.121","1.122","1.123","1.124","1.125","1.126","1.127","1.127.2","1.127.3","1.127.4","1.127.5","1.127.6","1.127.7","1.127.8","1.127.10","1.127.11","1.127.12","1.127.13","1.127.14","1.127.15","1.127.16","1.127.18","1.127.19","1.127.20","1.127.22","1.127.23","1.127.24"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.149","1.150","1.152","1.153","1.154","1.155","1.156","1.157","1.157.1","1.157.2","1.157.3","1.157.4","1.157.5","1.157.6","1.157.8","1.157.10","1.157.11","1.157.12","1.157.13","1.157.14","1.157.15","1.157.16","1.157.17","1.157.18","1.157.19","1.157.20","1.157.21","1.157.22","1.157.23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.169","1.170","1.171","1.172","1.173","1.173.1","1.173.2","1.173.3","1.173.5","1.173.6","1.173.8","1.173.9","1.173.12","1.173.13","1.173.14","1.173.15","1.173.16","1.173.17","1.173.18","1.173.19","1.173.20","1.173.21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.183","1.183.1","1.183.2","1.184","1.185","1.186","1.187","1.187.1","1.187.2","1.187.3","1.187.4","1.187.6","1.187.7","1.187.8","1.187.9","1.187.10","1.187.11","1.187.12","1.187.14","1.187.15","1.187.16","1.187.17","1.187.19","1.187.20","1.187.23","1.187.24","1.187.25","1.187.26","1.187.27","1.187.29","1.187.30","1.187.31","1.187.32","1.187.33","1.187.34","1.187.35","1.187.36","1.187.38","1.187.39"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.201","1.202","1.204","20220124.git0c6a7b3b-0ubuntu1","20220217.git6342082c-0ubuntu1","20220217.git6342082c-0ubuntu3","20220302.gitee0667aa-0ubuntu1","20220314.gitcd01f857-0ubuntu1","20220314.gitcd01f857-0ubuntu2","20220329.git681281e4-0ubuntu1","20220329.git681281e4-0ubuntu3","20220329.git681281e4-0ubuntu3.2","20220329.git681281e4-0ubuntu3.3","20220329.git681281e4-0ubuntu3.4","20220329.git681281e4-0ubuntu3.5","20220329.git681281e4-0ubuntu3.6","20220329.git681281e4-0ubuntu3.7","20220329.git681281e4-0ubuntu3.9","20220329.git681281e4-0ubuntu3.10","20220329.git681281e4-0ubuntu3.11","20220329.git681281e4-0ubuntu3.12","20220329.git681281e4-0ubuntu3.13","20220329.git681281e4-0ubuntu3.14","20220329.git681281e4-0ubuntu3.16","20220329.git681281e4-0ubuntu3.17","20220329.git681281e4-0ubuntu3.18","20220329.git681281e4-0ubuntu3.19","20220329.git681281e4-0ubuntu3.21","20220329.git681281e4-0ubuntu3.22","20220329.git681281e4-0ubuntu3.23","20220329.git681281e4-0ubuntu3.24","20220329.git681281e4-0ubuntu3.26","20220329.git681281e4-0ubuntu3.29","20220329.git681281e4-0ubuntu3.30","20220329.git681281e4-0ubuntu3.31","20220329.git681281e4-0ubuntu3.34","20220329.git681281e4-0ubuntu3.35","20220329.git681281e4-0ubuntu3.36","20220329.git681281e4-0ubuntu3.37","20220329.git681281e4-0ubuntu3.38","20220329.git681281e4-0ubuntu3.39","20220329.git681281e4-0ubuntu3.40","20220329.git681281e4-0ubuntu3.41","20220329.git681281e4-0ubuntu3.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20230919.git3672ccab-0ubuntu2.1","20230919.git3672ccab-0ubuntu2.2","20240202.git36777504-0ubuntu1","20240318.git3b128b60-0ubuntu1","20240318.git3b128b60-0ubuntu2","20240318.git3b128b60-0ubuntu2.1","20240318.git3b128b60-0ubuntu2.2","20240318.git3b128b60-0ubuntu2.3","20240318.git3b128b60-0ubuntu2.4","20240318.git3b128b60-0ubuntu2.5","20240318.git3b128b60-0ubuntu2.6","20240318.git3b128b60-0ubuntu2.7","20240318.git3b128b60-0ubuntu2.9","20240318.git3b128b60-0ubuntu2.10","20240318.git3b128b60-0ubuntu2.11","20240318.git3b128b60-0ubuntu2.12","20240318.git3b128b60-0ubuntu2.13","20240318.git3b128b60-0ubuntu2.14","20240318.git3b128b60-0ubuntu2.15","20240318.git3b128b60-0ubuntu2.17","20240318.git3b128b60-0ubuntu2.19","20240318.git3b128b60-0ubuntu2.21","20240318.git3b128b60-0ubuntu2.22","20240318.git3b128b60-0ubuntu2.23","20240318.git3b128b60-0ubuntu2.25","20240318.git3b128b60-0ubuntu2.26","20240318.git3b128b60-0ubuntu2.27","20240318.git3b128b60-0ubuntu2.29","20240318.git3b128b60.0ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20250317.git1d4c88ee-0ubuntu1","20250606.git3b75d677-0ubuntu1","20250701.gite2dad11e-0ubuntu1","20250711.git99d64b4f-0ubuntu1","20250807.gitb6b0b152-0ubuntu1","20250818.git07ed893d-0ubuntu1","20250901.git993ff19b-0ubuntu1","20250901.git993ff19b-0ubuntu1.2","20250901.git993ff19b-0ubuntu1.4","20250901.git993ff19b-0ubuntu1.5","20250901.git993ff19b-0ubuntu1.6","20250901.git993ff19b-0ubuntu1.7","20250901.git993ff19b-0ubuntu1.9","20250901.git993ff19b-0ubuntu1.10","20250901.git993ff19b-0ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20260319.git217ca6e4.1ubuntu","20260709.git2c35b1ed.1ubuntu","20260818.giteeed587f.1ubuntu","20260911.giteeccccbe.1ubuntu","20260915.git1522c78a.1ubuntu"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20250901.git993ff19b-0ubuntu1","20251009.git46a6999a-0ubuntu1","20251029.git4f72031f-0ubuntu1","20251125.gitff6418d1-0ubuntu1","20260108.gitd86b47f7-0ubuntu1","20260123.git1b7b9f6c.0ubuntu","20260227.gitd8e138dd.0ubuntu","20260319.git217ca6e4.0ubuntu","20260319.git217ca6e4.1ubuntu"]}],"products":[{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"4th gen amd epyc™ processors"},{"vendor":"amd","product":"epyc_7203_firmware"},{"vendor":"amd","product":"epyc_7203p_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7303_firmware"},{"vendor":"amd","product":"epyc_7303p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_73f3_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7453_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7643p_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7663p_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_8024p_firmware"},{"vendor":"amd","product":"epyc_8024pn_firmware"},{"vendor":"amd","product":"epyc_8124p_firmware"},{"vendor":"amd","product":"epyc_8124pn_firmware"},{"vendor":"amd","product":"epyc_8224p_firmware"},{"vendor":"amd","product":"epyc_8224pn_firmware"},{"vendor":"amd","product":"epyc_8324p_firmware"},{"vendor":"amd","product":"epyc_8324pn_firmware"},{"vendor":"amd","product":"epyc_8434p_firmware"},{"vendor":"amd","product":"epyc_8434pn_firmware"},{"vendor":"amd","product":"epyc_8534p_firmware"},{"vendor":"amd","product":"epyc_8534pn_firmware"},{"vendor":"amd","product":"epyc_9124_firmware"},{"vendor":"amd","product":"epyc_9174f_firmware"},{"vendor":"amd","product":"epyc_9184x_firmware"},{"vendor":"amd","product":"epyc_9224_firmware"},{"vendor":"amd","product":"epyc_9254_firmware"},{"vendor":"amd","product":"epyc_9274f_firmware"},{"vendor":"amd","product":"epyc_9334_firmware"},{"vendor":"amd","product":"epyc_9354_firmware"},{"vendor":"amd","product":"epyc_9354p_firmware"},{"vendor":"amd","product":"epyc_9374f_firmware"},{"vendor":"amd","product":"epyc_9384x_firmware"},{"vendor":"amd","product":"epyc_9454_firmware"},{"vendor":"amd","product":"epyc_9454p_firmware"},{"vendor":"amd","product":"epyc_9474f_firmware"},{"vendor":"amd","product":"epyc_9534_firmware"},{"vendor":"amd","product":"epyc_9554_firmware"},{"vendor":"amd","product":"epyc_9554p_firmware"},{"vendor":"amd","product":"epyc_9634_firmware"},{"vendor":"amd","product":"epyc_9654_firmware"},{"vendor":"amd","product":"epyc_9654p_firmware"},{"vendor":"amd","product":"epyc_9684x_firmware"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007","tags":["vendor-advisory","x_transferred","Broken Link","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31347"},{"url":"https://github.com/advisories/GHSA-ggv6-7vfj-r2fw"},{"url":"https://ubuntu.com/security/CVE-2023-31347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31347","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-31347","description":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause a\nguest to observe an incorrect TSC when Secure TSC is enabled potentially\nresulting in a loss of guest integrity.  \n\n\n\n\n","status":"published","published":"2024-02-13T19:18:51.045Z","modified":"2025-03-17T17:46:05.955Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:35:27.430605Z"}],"euvd":[{"id":"EUVD-2023-35658","description":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause a\nguest to observe an incorrect TSC when Secure TSC is enabled potentially\nresulting in a loss of guest integrity.  \n\n\n\n\n","status":"published","published":"2024-02-13T19:18:51Z","modified":"2025-03-17T17:46:05Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:01.76583Z"}],"ghsa":[{"id":"GHSA-ggv6-7vfj-r2fw","title":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause...","description":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause a\nguest to observe an incorrect TSC when Secure TSC is enabled potentially\nresulting in a loss of guest integrity.  ","status":"published","published":"2024-02-13T21:30:30Z","modified":"2025-03-17T18:31:38Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T15:00:19.012519Z"}],"nvd":[{"id":"CVE-2023-31347","description":"Due to a code bug in\nSecure_TSC, SEV firmware may allow an attacker with high privileges to cause a\nguest to observe an incorrect TSC when Secure TSC is enabled potentially\nresulting in a loss of guest integrity.  \n\n\n\n\n","status":"published","published":"2024-02-13T20:15:52.79Z","modified":"2026-06-17T05:56:49.733Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:09:04.527564Z"}],"osv":[{"id":"UBUNTU-CVE-2023-31347","description":"Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.","status":"published","published":"2024-02-13T20:15:00Z","modified":"2026-10-17T12:56:05.217716129Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"}]}}