CVE-2023-20593

23

FAUCET Score

CVE-2023-20593, also known as Zenbleed, is a medium-severity vulnerability affecting AMD Zen 2 CPUs, including those used by Debian and Xen. Under specific microarchitectural conditions, this flaw allows a local attacker to potentially access sensitive information. The CVSS score is 5.5, indicating a low attack complexity and no user interaction required, with a high impact on confidentiality. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting high awareness.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		4.14.0CPE matchmatch criteria	cpe:2.3:o:xen:xen:4.14.0::::::x86:
		4.15.0CPE matchmatch criteria	cpe:2.3:o:xen:xen:4.15.0::::::x86:
		4.16.0CPE matchmatch criteria	cpe:2.3:o:xen:xen:4.16.0::::::x86:
		4.17.0CPE matchmatch criteria	cpe:2.3:o:xen:xen:4.17.0::::::x86:
		10.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:10.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

5.19%

Probability of exploitation in next 30 days

EPSS Percentile

91.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0519 is in the 100th percentile among its peer group of 15,938 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (37)

denopatch availablevia llm_extracted

keraspatch availablevia llm_extracted

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: linux-firmware-0:20200421-81.git78c0348.el7_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: kernel-0:3.10.0-693.112.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)Fixed in: kernel-0:3.10.0-957.105.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)Fixed in: linux-firmware-0:20180911-69.2.git85c5d90.el7_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.79.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: linux-firmware-0:20190429-74.gitddde598.el7_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-477.27.1.rt7.290.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-477.27.1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: linux-firmware-0:20230404-117.git2e92a49f.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: linux-firmware-0:20190516-97.git711d3297.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: linux-firmware-0:20191202-100.gite8a0f4c9.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.120.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-193.120.1.rt13.171.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: linux-firmware-0:20191202-100.gite8a0f4c9.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-193.120.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: linux-firmware-0:20191202-100.gite8a0f4c9.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-1160.99.1.rt56.1245.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.114.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: linux-firmware-0:20201218-105.git05789708.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-305.114.1.rt7.190.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-305.114.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: linux-firmware-0:20201218-105.git05789708.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-305.114.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: linux-firmware-0:20201218-105.git05789708.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: kernel-0:4.18.0-372.70.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: linux-firmware-0:20220210-112.git6342082c.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-284.30.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt-0:5.14.0-284.30.1.rt14.315.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: linux-firmware-0:20230310-135.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-0:5.14.0-70.80.1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-rt-0:5.14.0-70.80.1.rt21.151.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: linux-firmware-0:20220209-128.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-372.70.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-193.120.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-1160.99.1.el7

Vendor Advisories (3)

denollm-deno-6daa9246eca7283dMEDIUM

AMD Client UEFI – Cross-Process Information Leak

kerasllm-keras-57b77ae55a5ed93dMEDIUM

AMD Client UEFI – Cross-Process Information Leak

redhatCVE-2023-20593Moderate

hw: amd: Cross-Process Information Leak

References

cmpxchg8b.com / zenbleed.html

Exploit

seclists.org / fulldisclosure/2023/Jul/43

Not Applicable

lists.debian.org / debian-lts-announce/2023/07/msg00030.html

Mailing List

lists.debian.org / debian-lts-announce/2023/07/msg00033.html

Mailing ListThird Party Advisory

lists.debian.org / debian-lts-announce/2023/08/msg00001.html

lists.fedoraproject.org / archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE

lists.fedoraproject.org / archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR

lists.fedoraproject.org / archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML

security.netapp.com / advisory/ntap-20240531-0004

amd.com / en/corporate/product-security/bulletin/AMD-SB-7008

Vendor Advisory

debian.org / security/2023/dsa-5459

Third Party Advisory

debian.org / security/2023/dsa-5461

Third Party Advisory

debian.org / security/2023/dsa-5462

Third Party Advisory

openwall.com / lists/oss-security/2023/07/24/3

Mailing List

openwall.com / lists/oss-security/2023/07/25/1

Mailing List

openwall.com / lists/oss-security/2023/07/25/12

Mailing List

openwall.com / lists/oss-security/2023/07/25/13

Mailing List

openwall.com / lists/oss-security/2023/07/25/14

Mailing List

openwall.com / lists/oss-security/2023/07/25/15

Mailing List

openwall.com / lists/oss-security/2023/07/25/16

Mailing List

openwall.com / lists/oss-security/2023/07/25/17

Mailing List

openwall.com / lists/oss-security/2023/07/25/5

Mailing List

openwall.com / lists/oss-security/2023/07/25/6

Mailing List

openwall.com / lists/oss-security/2023/07/26/1

Mailing ListMitigationPatchThird Party Advisory

openwall.com / lists/oss-security/2023/07/31/2

Mailing ListMitigationPatchThird Party Advisory

openwall.com / lists/oss-security/2023/08/08/6

openwall.com / lists/oss-security/2023/08/08/7

openwall.com / lists/oss-security/2023/08/08/8

openwall.com / lists/oss-security/2023/08/16/4

openwall.com / lists/oss-security/2023/08/16/5

openwall.com / lists/oss-security/2023/09/22/11

openwall.com / lists/oss-security/2023/09/22/9

openwall.com / lists/oss-security/2023/09/25/4

openwall.com / lists/oss-security/2023/09/25/7

xenbits.xen.org / xsa/advisory-433.html

MitigationPatchVendor Advisory