CVE-2022-23818
Summary
| CVE | CVE-2022-23818 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-05-09 19:15:00 UTC |
| Updated | 2023-05-22 15:51:00 UTC |
| Description | Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Amd | Epyc 72f3 | - | All | All | All |
| Operating System | Amd | Epyc 72f3 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7313 | - | All | All | All |
| Hardware | Amd | Epyc 7313p | - | All | All | All |
| Operating System | Amd | Epyc 7313p Firmware | milanpi_1.0.0.9 | All | All | All |
| Operating System | Amd | Epyc 7313 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7343 | - | All | All | All |
| Operating System | Amd | Epyc 7343 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7373x | - | All | All | All |
| Operating System | Amd | Epyc 7373x Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 73f3 | - | All | All | All |
| Operating System | Amd | Epyc 73f3 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7413 | - | All | All | All |
| Operating System | Amd | Epyc 7413 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7443 | - | All | All | All |
| Hardware | Amd | Epyc 7443p | - | All | All | All |
| Operating System | Amd | Epyc 7443p Firmware | milanpi_1.0.0.9 | All | All | All |
| Operating System | Amd | Epyc 7443 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7453 | - | All | All | All |
| Operating System | Amd | Epyc 7453 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7473x | - | All | All | All |
| Operating System | Amd | Epyc 7473x Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 74f3 | - | All | All | All |
| Operating System | Amd | Epyc 74f3 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7513 | - | All | All | All |
| Operating System | Amd | Epyc 7513 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7543 | - | All | All | All |
| Hardware | Amd | Epyc 7543p | - | All | All | All |
| Operating System | Amd | Epyc 7543p Firmware | milanpi_1.0.0.9 | All | All | All |
| Operating System | Amd | Epyc 7543 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7573x | - | All | All | All |
| Operating System | Amd | Epyc 7573x Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 75f3 | - | All | All | All |
| Operating System | Amd | Epyc 75f3 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7643 | - | All | All | All |
| Operating System | Amd | Epyc 7643 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7663 | - | All | All | All |
| Operating System | Amd | Epyc 7663 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7713 | - | All | All | All |
| Hardware | Amd | Epyc 7713p | - | All | All | All |
| Operating System | Amd | Epyc 7713p Firmware | milanpi_1.0.0.9 | All | All | All |
| Operating System | Amd | Epyc 7713 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7763 | - | All | All | All |
| Operating System | Amd | Epyc 7763 Firmware | milanpi_1.0.0.9 | All | All | All |
| Hardware | Amd | Epyc 7773x | - | All | All | All |
| Operating System | Amd | Epyc 7773x Firmware | milanpi_1.0.0.9 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 | MISC | www.amd.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.