{"id":"CVE-2021-46774","aliases":["EUVD-2021-33430","GHSA-8wpw-g939-rjw4","SUSE-SU-2023:4654-1","SUSE-SU-2023:4655-1","SUSE-SU-2023:4660-1","SUSE-SU-2023:4664-1","SUSE-SU-2023:4665-1","SUSE-SU-2024:2376-1"],"status":"published","title":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to...","description":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00508,"percentile":0.43715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-11-14T18:52:11Z","modified":"2026-06-17T04:15:32Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190618-5.34.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190618-5.34.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11}],"products":[{"vendor":"amd","product":"1st gen amd epyc™ processors"},{"vendor":"amd","product":"2nd gen amd epyc™ processors"},{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"4th gen amd epyc™ processors"},{"vendor":"amd","product":"amd epyc™ embedded 3000"},{"vendor":"amd","product":"amd epyc™ embedded 7002"},{"vendor":"amd","product":"amd epyc™ embedded 7003"},{"vendor":"amd","product":"amd ryzen™  embedded 5000"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processors “vermeer”"},{"vendor":"amd","product":"amd ryzen™ threadripper™ 3000 series processors “castle peak” hedt"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro 3000wx series processors  “chagall” ws"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro processors “castle peak” ws sp3"},{"vendor":"amd","product":"epyc_7001_firmware"},{"vendor":"amd","product":"epyc_7203_firmware"},{"vendor":"amd","product":"epyc_7203p_firmware"},{"vendor":"amd","product":"epyc_7232p_firmware"},{"vendor":"amd","product":"epyc_7251_firmware"},{"vendor":"amd","product":"epyc_7252_firmware"},{"vendor":"amd","product":"epyc_7261_firmware"},{"vendor":"amd","product":"epyc_7262_firmware"},{"vendor":"amd","product":"epyc_7272_firmware"},{"vendor":"amd","product":"epyc_7281_firmware"},{"vendor":"amd","product":"epyc_7282_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7301_firmware"},{"vendor":"amd","product":"epyc_7302_firmware"},{"vendor":"amd","product":"epyc_7302p_firmware"},{"vendor":"amd","product":"epyc_7303_firmware"},{"vendor":"amd","product":"epyc_7303p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7351_firmware"},{"vendor":"amd","product":"epyc_7351p_firmware"},{"vendor":"amd","product":"epyc_7352_firmware"},{"vendor":"amd","product":"epyc_7371_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_73f3_firmware"},{"vendor":"amd","product":"epyc_7401_firmware"},{"vendor":"amd","product":"epyc_7401p_firmware"},{"vendor":"amd","product":"epyc_7402_firmware"},{"vendor":"amd","product":"epyc_7402p_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7451_firmware"},{"vendor":"amd","product":"epyc_7452_firmware"},{"vendor":"amd","product":"epyc_7453_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7501_firmware"},{"vendor":"amd","product":"epyc_7502_firmware"},{"vendor":"amd","product":"epyc_7502p_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7532_firmware"},{"vendor":"amd","product":"epyc_7542_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7551_firmware"},{"vendor":"amd","product":"epyc_7551p_firmware"},{"vendor":"amd","product":"epyc_7552_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7601_firmware"},{"vendor":"amd","product":"epyc_7642_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7643p_firmware"},{"vendor":"amd","product":"epyc_7662_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7663p_firmware"},{"vendor":"amd","product":"epyc_7702_firmware"},{"vendor":"amd","product":"epyc_7702p_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7742_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_7f32_firmware"},{"vendor":"amd","product":"epyc_7f52_firmware"},{"vendor":"amd","product":"epyc_7f72_firmware"},{"vendor":"amd","product":"epyc_7h12_firmware"},{"vendor":"amd","product":"epyc_8024p_firmware"},{"vendor":"amd","product":"epyc_8024pn_firmware"},{"vendor":"amd","product":"epyc_8124p_firmware"},{"vendor":"amd","product":"epyc_8124pn_firmware"},{"vendor":"amd","product":"epyc_8224p_firmware"},{"vendor":"amd","product":"epyc_8224pn_firmware"},{"vendor":"amd","product":"epyc_8324p_firmware"},{"vendor":"amd","product":"epyc_8324pn_firmware"},{"vendor":"amd","product":"epyc_8434p_firmware"},{"vendor":"amd","product":"epyc_8434pn_firmware"},{"vendor":"amd","product":"epyc_8534p_firmware"},{"vendor":"amd","product":"epyc_8534pn_firmware"},{"vendor":"amd","product":"epyc_9124_firmware"},{"vendor":"amd","product":"epyc_9174f_firmware"},{"vendor":"amd","product":"epyc_9184x_firmware"},{"vendor":"amd","product":"epyc_9224_firmware"},{"vendor":"amd","product":"epyc_9254_firmware"},{"vendor":"amd","product":"epyc_9274f_firmware"},{"vendor":"amd","product":"epyc_9334_firmware"},{"vendor":"amd","product":"epyc_9354_firmware"},{"vendor":"amd","product":"epyc_9354p_firmware"},{"vendor":"amd","product":"epyc_9374f_firmware"},{"vendor":"amd","product":"epyc_9384x_firmware"},{"vendor":"amd","product":"epyc_9454_firmware"},{"vendor":"amd","product":"epyc_9454p_firmware"},{"vendor":"amd","product":"epyc_9474f_firmware"},{"vendor":"amd","product":"epyc_9534_firmware"},{"vendor":"amd","product":"epyc_9554_firmware"},{"vendor":"amd","product":"epyc_9554p_firmware"},{"vendor":"amd","product":"epyc_9634_firmware"},{"vendor":"amd","product":"epyc_9654_firmware"},{"vendor":"amd","product":"epyc_9654p_firmware"},{"vendor":"amd","product":"epyc_9684x_firmware"},{"vendor":"amd","product":"epyc_9734_firmware"},{"vendor":"amd","product":"epyc_9754_firmware"},{"vendor":"amd","product":"epyc_9754s_firmware"},{"vendor":"amd","product":"ryzen_3_3100_firmware"},{"vendor":"amd","product":"ryzen_3_3300x_firmware"},{"vendor":"amd","product":"ryzen_5_3500_firmware"},{"vendor":"amd","product":"ryzen_5_3500x_firmware"},{"vendor":"amd","product":"ryzen_5_3600_firmware"},{"vendor":"amd","product":"ryzen_5_3600x_firmware"},{"vendor":"amd","product":"ryzen_5_3600xt_firmware"},{"vendor":"amd","product":"ryzen_5_5500_firmware"},{"vendor":"amd","product":"ryzen_5_5600_firmware"},{"vendor":"amd","product":"ryzen_5_5600x_firmware"},{"vendor":"amd","product":"ryzen_7_3700xt_firmware"},{"vendor":"amd","product":"ryzen_7_3800x_firmware"},{"vendor":"amd","product":"ryzen_7_3800xt_firmware"},{"vendor":"amd","product":"ryzen_7_5700x_firmware"},{"vendor":"amd","product":"ryzen_7_5800_firmware"},{"vendor":"amd","product":"ryzen_7_5800x3d_firmware"},{"vendor":"amd","product":"ryzen_7_5800x_firmware"},{"vendor":"amd","product":"ryzen_9_3900_firmware"},{"vendor":"amd","product":"ryzen_9_3900x_firmware"},{"vendor":"amd","product":"ryzen_9_3950x_firmware"},{"vendor":"amd","product":"ryzen_9_3950xt_firmware"},{"vendor":"amd","product":"ryzen_9_5900_firmware"},{"vendor":"amd","product":"ryzen_9_5900x_firmware"},{"vendor":"amd","product":"ryzen_9_5950x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3960x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3970x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3990x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3795wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3945wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3955wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3975wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3995wx_firmware"},{"vendor":"amd","product":"ryzen™ 3000 series desktop processors “matisse\""}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001","tags":["vendor-advisory","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46774"},{"url":"https://github.com/advisories/GHSA-8wpw-g939-rjw4"},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234654-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215823","tags":["report"]},{"url":"https://bugzilla.suse.com/1215831","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20592","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234655-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234660-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234664-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234665-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242376-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-46774","description":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.","status":"published","published":"2023-11-14T18:52:11.012Z","modified":"2024-10-11T18:07:59.642Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:03.320536Z"}],"euvd":[{"id":"EUVD-2021-33430","description":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.","status":"published","published":"2023-11-14T18:52:11Z","modified":"2024-10-11T18:07:59Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L","level":"medium"}],"updated_at":"2026-11-03T00:27:39.149807Z"}],"ghsa":[{"id":"GHSA-8wpw-g939-rjw4","title":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to...","description":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.\n\n\n\n\n\n\n\n\n\n\n\n\n","status":"published","published":"2023-11-14T21:30:59Z","modified":"2024-02-22T05:08:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:55:37.87337Z"}],"nvd":[{"id":"CVE-2021-46774","description":"Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.","status":"published","published":"2023-11-14T19:15:10.407Z","modified":"2026-06-17T04:15:32.747Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:07.764332Z"}],"osv":[{"id":"SUSE-SU-2023:4654-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T10:35:24Z","modified":"2026-02-04T04:19:12.854753Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4655-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T10:35:37Z","modified":"2026-02-04T04:31:04.776727Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4660-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T12:06:17Z","modified":"2026-02-04T04:17:37.137883Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4664-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T12:34:02Z","modified":"2026-02-04T02:46:36.112137Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4665-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T12:35:09Z","modified":"2026-02-04T03:34:42.008994Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:2376-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2024-07-09T17:20:51Z","modified":"2026-02-04T03:54:31.78821Z","updated_at":"2026-11-02T15:53:55.136363Z"}]}}