Nixpkgs Security Tracker

Untriaged

Permalink CVE-2023-20563

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 6 months ago

Insufficient protections in System Management Mode (SMM) code may allow …

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 vendor-advisory x_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 vendor-advisory x_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 vendor-advisory x_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 vendor-advisory x_transferred

Affected products

==various

ryzen_embedded_5000

==EmbAM4PI 1.0.0.3 (2023-07-31)

ryzen_embedded_r1000

==EmbeddedPI-FP5 1.2.0.A (2023-07-31)

ryzen_embedded_r2000

==EmbeddedPI-FP5 1.0.0.2 (2023-07-31)

ryzen_embedded_v3000

==EmbeddedPI-FP7r2 1.0.0.6 (2023-09-15)

AMD Ryzen™ Embedded 5000

==various

AMD Ryzen™ Embedded R1000

==various

AMD Ryzen™ Embedded R2000

==various

AMD Ryzen™ Embedded V3000

==various

ryzen_7000_series_desktop_processors

==ComboAM5 1.0.7.0 (2023-04-18)

ryzen_5000_series_processors_with_radeon_graphics

==CezannePI-FP6 1.0.0.F (2023-06-20)

ryzen_6000_series_processors_with_radeon_graphics

==RembrandtPI-FP7 1.0.0.9 (2023-05-16)

ryzen_7035_series_processors_with_radeon_graphics

==RembrandtPI-FP7 1.0.0.9 (2023-05-16)

ryzen_5000_series_mobile_processors_with_radeon_graphics

==CezannePI-FP6 1.0.0.F (2023-06-20)

ryzen_7030_series_mobile_processors_with_radeon_graphics

==CezannePI-FP6 1.0.0.F (2023-06-20)

ryzen_7040_series_mobile_processors_with_radeon_graphics

==PhoenixPI-FP8-FP7 PI 1.0.0.1g (2023-05-11)

ryzen_5000_series_desktop_processors_with_radeon_graphics

==ComboAM4V2 1.2.0.B *(2023-08-25)

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable -
- nixpkgs-unstable 0.12.0

pkgs.perlPackages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable -
- nixpkgs-unstable 1.277

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable -
- nixpkgs-unstable 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable -
- nixpkgs-unstable 1.277

pkgs.perlPackages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable -
- nixpkgs-unstable 0.28

pkgs.perlPackages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable -
- nixpkgs-unstable API2-2.045

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable -
- nixpkgs-unstable 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable -
- nixpkgs-unstable 19.1.10

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable -
- nixpkgs-unstable 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable -
- nixpkgs-unstable 0.28

pkgs.perlPackages.PPIxUtils

Utility functions for PPI

nixos-unstable -
- nixpkgs-unstable 0.003

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable -
- nixpkgs-unstable API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable -
- nixpkgs-unstable API2-2.045

pkgs.perlPackages.PPIxRegexp

Parse regular expressions

nixos-unstable -
- nixpkgs-unstable 0.088

pkgs.perlPackages.ProcPIDFile

Manage process id files

nixos-unstable -
- nixpkgs-unstable 1.29

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable -
- nixpkgs-unstable 1.3.3.2

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable -
- nixpkgs-unstable 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable -
- nixpkgs-unstable 0.003

pkgs.perlPackages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable -
- nixpkgs-unstable 0.21

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable -
- nixpkgs-unstable 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable -
- nixpkgs-unstable 0.088

pkgs.perlPackages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable -
- nixpkgs-unstable 1.07

pkgs.perlPackages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable -
- nixpkgs-unstable 0.023

pkgs.perlPackages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable -
- nixpkgs-unstable 1.001000

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable -
- nixpkgs-unstable 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable -
- nixpkgs-unstable 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable -
- nixpkgs-unstable 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable -
- nixpkgs-unstable 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable -
- nixpkgs-unstable 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable -
- nixpkgs-unstable 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable -
- nixpkgs-unstable 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable -
- nixpkgs-unstable 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable -
- nixpkgs-unstable 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable -
- nixpkgs-unstable 1.001000

pkgs.perlPackages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable -
- nixpkgs-unstable 5.09

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable -
- nixpkgs-unstable 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable -
- nixpkgs-unstable 5.09

Package maintainers

@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@despsyched Priyanshu Tripathi <priyanshu.tripathi@deshaw.com>
@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.spoofdpi

pkgs.perlPackages.PPI

pkgs.perl538Packages.PPI

pkgs.perl540Packages.PPI

pkgs.perlPackages.GSSAPI

pkgs.perlPackages.PDFAPI2

pkgs.haskellPackages.hsPID

pkgs.spirv-llvm-translator

pkgs.perl538Packages.GSSAPI

pkgs.perl540Packages.GSSAPI

pkgs.perlPackages.PPIxUtils

pkgs.perl538Packages.PDFAPI2

pkgs.perl540Packages.PDFAPI2

pkgs.perlPackages.PPIxRegexp

pkgs.perlPackages.ProcPIDFile

pkgs.haskellPackages.EdisonAPI

pkgs.perl538Packages.PPIxUtils

pkgs.perl540Packages.PPIxUtils

pkgs.perlPackages.WWWTwilioAPI

pkgs.perl538Packages.PPIxRegexp

pkgs.perl540Packages.PPIxRegexp

pkgs.perlPackages.OpenAPIClient

pkgs.perlPackages.PPIxQuoteLike

pkgs.perlPackages.PPIxUtilities

pkgs.perl538Packages.ProcPIDFile

pkgs.perl540Packages.ProcPIDFile

pkgs.perl538Packages.WWWTwilioAPI

pkgs.perl540Packages.WWWTwilioAPI

pkgs.perl538Packages.OpenAPIClient

pkgs.perl538Packages.PPIxQuoteLike

pkgs.perl538Packages.PPIxUtilities

pkgs.perl540Packages.OpenAPIClient

pkgs.perl540Packages.PPIxQuoteLike

pkgs.perl540Packages.PPIxUtilities

pkgs.perlPackages.MojoliciousPluginOpenAPI

pkgs.perl538Packages.MojoliciousPluginOpenAPI

pkgs.perl540Packages.MojoliciousPluginOpenAPI

Package maintainers