CVE-2023-31347 Other in 3rd Gen AMD EPYC™ Processors

Medium 4.9 Published 13 Feb 2024 Updated 17 Mar 2025

High-privilege attackers can cause guest integrity loss by observing incorrect TSC values in AMD EPYC Secure TSC mode.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-31347?

CVE-2023-31347 is a medium-severity vulnerability in Amd Epyc 72f3 Firmware, published on 13 Feb 2024. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.

Weakness: CWE-682

Which versions are affected by CVE-2023-31347?

It affects 62 products.

Products include Amd Epyc 7203 Firmware, Amd Epyc 7203p Firmware, Amd Epyc 72f3 Firmware, Amd Epyc 7303 Firmware, Amd Epyc 7303p Firmware, Amd Epyc 7313 Firmware and 56 more.

How do I fix CVE-2023-31347?

No fix has been published for CVE-2023-31347 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-31347 being exploited?

There is no known exploitation of CVE-2023-31347 in the wild and no public exploit code.

All Amd Epyc 72f3 Firmware vulnerabilities

Sources

Also known as GHSA-ggv6-7vfj-r2fw, UBUNTU-CVE-2023-31347.