Database/Firmware, BMC & network fabric
AMD 16h processor microcode - locked instructions vs write-combined memory: Interaction between locked instructions
Impact
Interaction between locked instructions and write-combined memory types hangs the system, reachable from an unprivileged local application. A tenant can wedge the whole machine with a small crafted program - no privilege needed, no recovery short of a hard reset. Included for completeness on legacy AMD hardware; it is the archetype of the 'any tenant can halt the node' class that keeps recurring in CPU errata.
Who can reach it
Local, unprivileged. Any process on the machine, including inside a container.
What to do
Fixed by a BIOS/microcode update carrying the erratum 793 workaround. Affects AMD 16h family processors, long out of production - if you have any of these in a fleet, the realistic answer is that they are past firmware support and should be retired rather than patched.
References
Related entries
- Juniper Junos OS MACsec key configuration (CKN/CAK): If you configure a MACsec connectivity-association name or keyCVE-2018-0021 · Juniper Junos OS MACsec key configuration (CKN/CAK)Unscored
- swtpm (state blob header parsing): An invalid hdrsize in swtpm's saved state header causes an out-of-bounds accessCVE-2022-23645 · swtpm (state blob header parsing)Unscored
- Supermicro BMC (IPMI web interface): Part of the same 2023 Supermicro BMC web-interface batchCVE-2023-40286 · Supermicro BMC (IPMI web interface)Unscored
- Linux x86/srso - SRSO mitigation missing for Hygon processors: The kernel's Speculative Return Stack OverflowCVE-2023-52482 · Linux x86/srso - SRSO mitigation missing for Hygon processorsUnscored
- Linux KVM/SVM - source vCPU selection in SEV-ES intra-host migration: KVM fetched source vCPUs from the wrong VMCVE-2023-54296 · Linux KVM/SVM - source vCPU selection in SEV-ES intra-host migrationUnscored
- tpm2-tools (tpm2_checkquote TPM2_GENERATED magic validation): tpm2_checkquote does not verify that the structureCVE-2024-29038 · tpm2-tools (tpm2_checkquote TPM2_GENERATED magic validation)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.