CVE-2023-31347

2024-02-1320:15:52

[email protected]

web.nvd.nist.gov

code bug

secure_tsc

high-privileged attacker

incorrect tsc observation

guest integrity

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

JSON

Due to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a
guest to observe an incorrect TSC when Secure TSC is enabled potentially
resulting in a loss of guest integrity.

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007