CVE-2023-31325
7.2AMD · Ryzen 8000 Series, Ryzen 7040 Series, Radeon RX 7000 Series, Radeon PRO W7000 Series
Improper isolation of shared resources on specific AMD System-on-a-chip (SoC) hardware allows a privileged attacker to tamper with the PSP reserved DRAM region.
Executive summary
A high-severity vulnerability in AMD processors and graphics hardware enables a privileged attacker to compromise system confidentiality and integrity by tampering with reserved memory.
Vulnerability
This flaw involves improper isolation of shared resources on the SoC, which can be exploited by an attacker with high privileges to modify the contents of the Platform Security Processor (PSP) reserved DRAM region.
Business impact
Successful exploitation of this vulnerability could lead to a total loss of data confidentiality and integrity within the affected systems. Given the CVSS score of 7.2, this represents a significant risk to organizational security, particularly in environments where hardware-level isolation is relied upon to protect sensitive cryptographic or system-level processes.
Remediation
Immediate Action: Update affected systems to the following versions: ComboAM5 1.1.0.1 for Ryzen 8000 Series, PhoenixPI-FP8-FP7 1.1.0.0 for Ryzen 7040 Series, AMD Software: Adrenalin Edition 24.7.1 for Radeon RX 7000, and AMD Software: PRO Edition 24.Q2 for Radeon PRO W7000.
Proactive Monitoring: Monitor system logs for unauthorized attempts to access or modify memory regions associated with the Platform Security Processor.
Compensating Controls: Ensure that administrative access to target systems is restricted, as the vulnerability requires high privileges to execute successfully.
Exploitation status
Public Exploit Available: No (exploit_available: unknown).
Analyst recommendation
This vulnerability highlights the critical importance of keeping firmware and driver components updated on hardware-level infrastructure. Administrators should prioritize the application of the specified BIOS and software updates to ensure the PSP region is properly isolated, thereby neutralizing the risk of unauthorized tampering by privileged actors.