Intel(R) Processors: Sequence of Processor Instructions Leads to Unexpected Behavior
CVE-2023-23583 is a high-severity sequence of processor instructions leads to unexpected behavior vulnerability in Intel(R) Processors, with a CVSS 3.1 base score of 7.8 out of 10. It can be exploited with local access to the system by an attacker with a low-privileged account, without any action from a user. Affected Intel(R) Processors versions: See references. The record does not name a fixed version, so check the vendor advisory. There is no confirmed exploitation so far. EPSS estimates a 1.28% chance of exploitation within 30 days, higher than 71% of scored CVEs.
High severity with no evidence of exploitation so far.
What to do
- Check which version of Intel(R) Processors you run against the affected versions below, and install the vendor's latest release.
- Read the advisory on intel.com for workarounds and exact fixed builds.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| Intel(R) Processors | Intel(R) Processors | See references | Not stated |
| Intel | Core I3-10100y Firmware | Not specified in the record | Not stated |
| Intel | Core I3-10110u Firmware | Not specified in the record | Not stated |
| Intel | Core I3-10110y Firmware | Not specified in the record | Not stated |
| Intel | Core I3-1005g1 Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10500h Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10200h Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10310u Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10300h Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10400h Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10210u Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10210y Firmware | Not specified in the record | Not stated |
| Intel | Core I5-10310y Firmware | Not specified in the record | Not stated |
| Intel | Core I5-1035g1 Firmware | Not specified in the record | Not stated |
| Intel | Core I5-1035g4 Firmware | Not specified in the record | Not stated |
| Intel | Core I5-1035g7 Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10870h Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10610u Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10810u Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10750h Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10850h Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10875h Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10510u Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10510y Firmware | Not specified in the record | Not stated |
| Intel | Core I7-10710u Firmware | Not specified in the record | Not stated |
Version data comes from the organisation that assigned the CVE; 35 further products are omitted here. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Attack vector
- LocalThe attacker needs local access or must trick a user into running something.
- Attack complexity
- LowNo special conditions are needed; the attack works reliably.
- Privileges required
- LowA basic user account is enough.
- User interaction
- NoneNo action by a victim is required.
- Scope
- UnchangedImpact stays within the vulnerable component.
- Confidentiality
- HighAll data handled by the component can be read.
- Integrity
- HighData or code can be modified at will.
- Availability
- HighThe component can be taken down completely.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Scored by NVD.
| Scoring system | Score | Severity | Scored by |
|---|---|---|---|
| CVSS 3.1 | 8.8 | High | CNA (intel.com) |
| CVSS 3.1 | 7.8 | High | NVD |
Official description
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
The underlying weakness: Sequence of Processor Instructions Leads to Unexpected Behavior
Specific combinations of processor instructions lead to undesirable behavior such as locking the processor until a hard reset performed.
How developers prevent this class of flaw
- Implement a rigorous testing strategy that incorporates randomization to explore instruction sequences that are unlikely to appear in normal workloads in order to identify halt and catch fire instruction sequences.
- Patch operating system to avoid running Halt and Catch Fire type sequences or to mitigate the damage caused by unexpected behavior. See.
More Sequence of Processor Instructions Leads to Unexpected Behavior vulnerabilities (CWE-1281)
Timeline
- CVE record published.
- CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
- Record last changed materially (score, affected products, status or references).
References
Third-party and government advisories
- openwall.com/lists/oss-security/2023/11/14/4Mailing List, Third Party Advisory
- openwall.com/lists/oss-security/2023/11/14/5Mailing List, Third Party Advisory
- openwall.com/lists/oss-security/2023/11/14/6Mailing List, Third Party Advisory
- openwall.com/lists/oss-security/2023/11/14/7Mailing List, Third Party Advisory
- security.netapp.com/advisory/ntap-20231116-0015/Third Party Advisory
- debian.org/security/2023/dsa-5563Third Party Advisory
Other references
Other vulnerabilities in Intel(R) Processors
- 7.0 High severity
- 7.8 High severity
- 7.5 High severity
- 7.5 High severity
- 7.5 High severity
- 7.5 High severity
Spotted an error? Tell us.