CLSA-2024-1728478701

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1728478701.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2024-1728478701
Upstream
Published
2024-10-09T12:58:24Z
Modified
2026-06-04T09:46:09.317679890Z
Summary
Fix CVE(s): CVE-2023-31315
Details
  • New microcode update packages from AMD upstream up to 2024-08-11:
    • Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5);
    • Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C);
  • SECURITY UPDATE: Fix improper validation in a model-specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
    • CVE-2023-31315
References

Affected packages

TuxCare:Ubuntu:18.04 / amd64-microcode

Package

Name
amd64-microcode
Purl
pkg:deb/tuxcare/amd64-microcode?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.20240811.1ubuntu0.18.04.1+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1728478701.json"