Bug 2207625 (AMD-SN-7005, CVE-2023-20569, RAS)

Summary:	CVE-2023-20569 hw amd: Return Address Predictor velunerability leading to information disclosure
Product:	[Other] Security Response	Reporter:	Rohit Keshri <rkeshri>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acaringi, allarkin, bhu, chwhite, darcari, dbohanno, ddepaula, debarbos, dfreiber, dvlasenk, ezulian, hkrzesin, jarod, jburrell, jdenham, jfaracco, jferlan, jforbes, jlelli, joe.lawrence, jshortt, jstancek, jwyatt, kcarcia, kcook34, kernel-mgr, ldoskova, lgoncalv, lleshchi, lzampier, mpanaous, mvanderw, nmurray, ptalbert, qzhao, rik.theys, rogbas, rrobaina, rvrbovsk, rysulliv, scweaver, security-response-team, swood, tglozar, tyberry, vkumar, walters, wcosta, williams, wmealing, ycote, ymankad
Target Milestone:	---	Keywords:	Security
Target Release:	---	Flags:	prodsec-dev: needinfo? (rkeshri)
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A side channel vulnerability was found in hw amd. Some AMD CPUs may allow an attacker to influence the return address prediction. This issue may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2217875, 2217876, 2217877, 2217878, 2230378, 2230379, 2230381, 2230382, 2230383, 2230384, 2230385, 2230386, 2230388, 2230390, 2230391, 2230392, 2230393, 2230394, 2230395, 2230396, 2230397, 2230406, 2230407, 2230408, 2230409, 2230410, 2230411, 2230412, 2230413, 2230414, 2230415, 2230416, 2230417, 2230418, 2230151
Bug Blocks:	2180682

Description Rohit Keshri 2023-05-16 11:32:10 UTC

A side channel attack known as ‘Inception’ or ‘RAS Poisoning’ may allow an attacker to influence branch prediction, potentially leading to information disclosure.

Refer:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html

Comment 10 Rohit Keshri 2023-08-08 19:16:12 UTC

Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2230151]