CVE catalog
CVE-2023-31315
AMD Microcode vulnerability
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.63% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "amd64-microcode",
"status": "fixed",
"release": "sid",
"version": "3.20251202.1"
},
{
"name": "amd64-microcode",
"status": "fixed",
"release": "forky",
"version": "3.20251202.1"
},
{
"name": "amd64-microcode",
"status": "fixed",
"release": "trixie",
"version": "3.20250311.1"
},
{
"name": "amd64-microcode",
"status": "fixed",
"release": "bookworm",
"version": "3.20250311.1~deb12u1"
},
{
"name": "amd64-microcode",
"status": "vulnerable",
"release": "bookworm-security",
"version": "3.20230719.1~deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "amd64-microcode",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "3.20240710.1"
},
{
"bug": null,
"name": "amd64-microcode",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "3.20240710.1"
},
{
"bug": null,
"name": "amd64-microcode",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "3.20240710.1"
},
{
"bug": null,
"name": "amd64-microcode",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "3.20240710.2~deb12u1"
}
],
"distribution_packages": [
{
"name": "amd64-microcode",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "3.20240710.2~deb12u1"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "3.20231019.1ubuntu2.1"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3"
}
]
}
],
"release": "pro",
"versions": [
"3.20160316.3",
"3.20171205.1",
"3.20180524.1~ubuntu0.18.04.1",
"3.20180524.1~ubuntu0.18.04.2",
"3.20191021.1ubuntu0.18.04.2",
"3.20191021.1+really3.20181128.1~ubuntu0.18.04.1",
"3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1",
"3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm2"
],
"ecosystem": "deb",
"fixed_version": "3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3",
"provider_record_id": "USN-7077-1"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20191218.1ubuntu1.3"
}
]
}
],
"release": "20.04",
"versions": [
"3.20181128.1ubuntu2",
"3.20191021.1ubuntu1",
"3.20191218.1ubuntu1",
"3.20191218.1ubuntu1.1",
"3.20191218.1ubuntu1.2"
],
"ecosystem": "deb",
"fixed_version": "3.20191218.1ubuntu1.3",
"provider_record_id": "USN-7077-1"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20191218.1ubuntu2.3"
}
]
}
],
"release": "22.04",
"versions": [
"3.20191218.1ubuntu2",
"3.20191218.1ubuntu2.1",
"3.20191218.1ubuntu2.2"
],
"ecosystem": "deb",
"fixed_version": "3.20191218.1ubuntu2.3",
"provider_record_id": "USN-7077-1"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20231019.1ubuntu2.1"
}
]
}
],
"release": "24.04",
"versions": [
"3.20230808.1.1ubuntu1",
"3.20231019.1ubuntu1",
"3.20231019.1ubuntu2"
],
"ecosystem": "deb",
"fixed_version": "3.20231019.1ubuntu2.1",
"provider_record_id": "USN-7077-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20241128-slfo.1.1_1.1"
}
]
}
],
"release": "linux micro 6.1",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20241128-slfo.1.1_1.1",
"provider_record_id": "SUSE-SU-2025:20227-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20241128-1.1"
}
]
}
],
"release": "linux micro 6.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20241128-1.1",
"provider_record_id": "SUSE-SU-2025:20129-1"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "14.04",
"versions": [
"1.20120910-3",
"2.20131007.1+really20130710.1",
"3.20180524.1~ubuntu0.14.04.1",
"3.20180524.1~ubuntu0.14.04.2+really20130710.1",
"3.20180524.1~ubuntu0.14.04.2+really20130710.1ubuntu1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2023-31315"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3"
}
]
}
],
"release": "pro",
"versions": [
"3.20160316.3",
"3.20171205.1",
"3.20180524.1~ubuntu0.18.04.1",
"3.20180524.1~ubuntu0.18.04.2",
"3.20191021.1ubuntu0.18.04.2",
"3.20191021.1+really3.20181128.1~ubuntu0.18.04.1",
"3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1",
"3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm2"
],
"ecosystem": "deb",
"fixed_version": "3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3",
"provider_record_id": "UBUNTU-CVE-2023-31315"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20191218.1ubuntu1.3"
}
]
}
],
"release": "20.04",
"versions": [
"3.20181128.1ubuntu2",
"3.20191021.1ubuntu1",
"3.20191218.1ubuntu1",
"3.20191218.1ubuntu1.1",
"3.20191218.1ubuntu1.2"
],
"ecosystem": "deb",
"fixed_version": "3.20191218.1ubuntu1.3",
"provider_record_id": "UBUNTU-CVE-2023-31315"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20191218.1ubuntu2.3"
}
]
}
],
"release": "22.04",
"versions": [
"3.20191218.1ubuntu2",
"3.20191218.1ubuntu2.1",
"3.20191218.1ubuntu2.2"
],
"ecosystem": "deb",
"fixed_version": "3.20191218.1ubuntu2.3",
"provider_record_id": "UBUNTU-CVE-2023-31315"
},
{
"name": "amd64-microcode",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20231019.1ubuntu2.1"
}
]
}
],
"release": "24.04",
"versions": [
"3.20230808.1.1ubuntu1",
"3.20231019.1ubuntu1",
"3.20231019.1ubuntu2"
],
"ecosystem": "deb",
"fixed_version": "3.20231019.1ubuntu2.1",
"provider_record_id": "UBUNTU-CVE-2023-31315"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20230724-150500.3.12.1"
}
]
}
],
"release": "linux enterprise micro 5.5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20230724-150500.3.12.1",
"provider_record_id": "SUSE-SU-2024:3081-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20230724-150500.3.12.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20230724-150500.3.12.1",
"provider_record_id": "SUSE-SU-2024:3081-1"
},
{
"name": "kernel-firmware",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20230724-150500.3.12.1"
}
]
}
],
"release": "leap micro 5.5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20230724-150500.3.12.1",
"provider_record_id": "SUSE-SU-2024:3081-1"
},
{
"name": "kernel-firmware",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20230724-150500.3.12.1"
}
]
}
],
"release": "leap 15.5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20230724-150500.3.12.1",
"provider_record_id": "SUSE-SU-2024:3081-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20200107-150100.3.43.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp2-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20200107-150100.3.43.1",
"provider_record_id": "SUSE-SU-2024:2944-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20200107-150100.3.43.1"
}
]
}
],
"release": "linux enterprise server 15 sp2-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20200107-150100.3.43.1",
"provider_record_id": "SUSE-SU-2024:2944-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20200107-150100.3.43.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp2",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20200107-150100.3.43.1",
"provider_record_id": "SUSE-SU-2024:2944-1"
},
{
"name": "kernel-firmware",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20240809-1.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20240809-1.1",
"provider_record_id": "OPENSUSE-SU-2024:14266-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "linux enterprise micro 5.3",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "linux enterprise micro 5.4",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "linux enterprise server 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp4",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "manager proxy 4.3",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20220509-150400.4.28.1"
}
]
}
],
"release": "manager server 4.3",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20220509-150400.4.28.1",
"provider_record_id": "SUSE-SU-2024:2980-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20241128-150600.3.9.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20241128-150600.3.9.1",
"provider_record_id": "SUSE-SU-2024:4255-1"
},
{
"name": "kernel-firmware",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20241128-150600.3.9.1"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20241128-150600.3.9.1",
"provider_record_id": "SUSE-SU-2024:4255-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20190618-5.37.1"
}
]
}
],
"release": "linux enterprise server 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20190618-5.37.1",
"provider_record_id": "SUSE-SU-2024:2911-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20190618-5.37.1"
}
]
}
],
"release": "linux enterprise server for sap applications 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20190618-5.37.1",
"provider_record_id": "SUSE-SU-2024:2911-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20210208-150300.4.22.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20210208-150300.4.22.1",
"provider_record_id": "SUSE-SU-2024:2943-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20210208-150300.4.22.1"
}
]
}
],
"release": "linux enterprise server 15 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20210208-150300.4.22.1",
"provider_record_id": "SUSE-SU-2024:2943-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20210208-150300.4.22.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp3",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20210208-150300.4.22.1",
"provider_record_id": "SUSE-SU-2024:2943-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20210208-150300.4.22.1"
}
]
}
],
"release": "linux enterprise micro 5.1",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20210208-150300.4.22.1",
"provider_record_id": "SUSE-SU-2024:2943-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20210208-150300.4.22.1"
}
]
}
],
"release": "linux enterprise micro 5.2",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20210208-150300.4.22.1",
"provider_record_id": "SUSE-SU-2024:2943-1"
},
{
"name": "kernel-firmware",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20210208-150300.4.22.1"
}
]
}
],
"release": "enterprise storage 7.1",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "20210208-150300.4.22.1",
"provider_record_id": "SUSE-SU-2024:2943-1"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [amd64-microcode]Unknown
Details (1)
3.20250311.1~deb12u1· amd64 · bookwormFixed · Fixed:
3.20240710.2~deb12u1usn · amd64-microcode · debian · bookworm; usn · amd64-microcode · debian · 12
[Debian 13 (Trixie)]
- [amd64-microcode]Unknown
Details (1)
3.20250311.1· amd64 · trixieFixed · Fixed:
3.20240710.1usn · amd64-microcode · debian · 13
Observed:
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-769027.json]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11242-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-31315]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2911-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2943-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2944-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2980-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:3081-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:4255-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20129-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20227-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2023-31315]
- [https://osv.dev/vulnerability/USN-7077-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:14266-1]
- [https://security-tracker.debian.org/tracker/CVE-2023-31315]
- [https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-31315.json]
- [https://ubuntu.com/security/notices/USN-7077-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1807.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]