CVE-2023-20588: AMD EPYC™ 7001 Processors

Affected products, as the CNA wrote them
Vendor	Product	Versions
AMD	EPYC™ 7001 Processors Package name:	affected various Other versions: affected
AMD	Athlon™ 3000 Series Processors with Radeon™ Graphics	affected various Other versions: affected
AMD	Ryzen™ 3000 Series Processors with Radeon™ Graphics Package name:	affected various Other versions: affected
AMD	Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics	affected Various Other versions: affected
AMD	Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics	affected various Other versions: affected

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.11, the 95th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 8 Aug 2023. New records show when each source confirmed them.

Sources

CVE List: CVE-2023-20588
NVD: CVE-2023-20588

References from the CNA

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007 vendor-advisory
www.debian.org/security/2023/dsa-5480
www.debian.org/security/2023/dsa-5492
www.openwall.com/lists/oss-security/2023/09/25/3
www.openwall.com/lists/oss-security/2023/09/25/4
xenbits.xen.org/xsa/advisory-439.html
www.openwall.com/lists/oss-security/2023/09/25/5
www.openwall.com/lists/oss-security/2023/09/25/8
www.openwall.com/lists/oss-security/2023/09/25/7
www.openwall.com/lists/oss-security/2023/09/26/5
www.openwall.com/lists/oss-security/2023/09/26/8
www.openwall.com/lists/oss-security/2023/09/26/9
www.openwall.com/lists/oss-security/2023/09/27/1
lists.fedoraproject.org/archives/list/[email protected]/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/
lists.fedoraproject.org/archives/list/[email protected]/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/
www.openwall.com/lists/oss-security/2023/10/03/14
www.openwall.com/lists/oss-security/2023/10/03/9
www.openwall.com/lists/oss-security/2023/10/03/15
www.openwall.com/lists/oss-security/2023/10/03/12
www.openwall.com/lists/oss-security/2023/10/03/13
www.openwall.com/lists/oss-security/2023/10/03/16
www.openwall.com/lists/oss-security/2023/10/04/1
www.openwall.com/lists/oss-security/2023/10/04/2
www.openwall.com/lists/oss-security/2023/10/04/4
www.openwall.com/lists/oss-security/2023/10/04/3
lists.fedoraproject.org/archives/list/[email protected]/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/
lists.debian.org/debian-lts-announce/2023/10/msg00027.html
security.netapp.com/advisory/ntap-20240531-0005/

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.