CVE-2023-20564

Medium

Description

Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution.

SeverityMedium

CVSS6.7

Exploit probability—

ProductAmd Ryzen Master

PublishedAug 15, 2023

First seenAug 15, 2023

How to fix

Update

amd ryzen_master2.11.2.2659 or later
amd ryzen_master_monitoring_sdkaugust_2023 or later

Vendor advisories

amd.com/en/corporate/product-security/bulletin/AMD-SB-7004

Affected products

Product	Affected versions	Fixed in
amd ryzen_master	v < 2.11.2.2659	2.11.2.2659
amd ryzen_master_monitoring_sdk	v < august_2023	august_2023

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.