{"id":"CVE-2022-23820","aliases":["EUVD-2022-28749","GHSA-9fmg-2fcx-q3vf","SUSE-SU-2023:4654-1","SUSE-SU-2023:4655-1","SUSE-SU-2023:4660-1","SUSE-SU-2023:4664-1","SUSE-SU-2023:4665-1","SUSE-SU-2024:2376-1","openSUSE-SU-2024:13475-1","openSUSE-SU-2025:14772-1"],"status":"published","title":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM...","description":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM potentially leading to arbitrary\ncode execution.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00697,"percentile":0.5349,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2023-11-14T18:52:21Z","modified":"2026-06-17T04:30:50Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210208-150300.4.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190618-5.34.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190618-5.34.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220509-150400.4.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200107-150100.3.40.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231128-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-firmware-ath12k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250206-1.1"}]}],"bundled":15}],"products":[{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"amd athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4"},{"vendor":"amd","product":"amd athlon™ 3000 series mobile processors with radeon™ graphics   “pollock”"},{"vendor":"amd","product":"amd epyc™ embedded 7003"},{"vendor":"amd","product":"amd ryzen™ 3000 series mobile processor with radeon™ graphics “picasso” fp5"},{"vendor":"amd","product":"amd ryzen™ 4000 series mobile processors with radeon™ graphics “renoir” fp6"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processor with radeon™ graphics  “cezanne”"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processors “vermeer”"},{"vendor":"amd","product":"amd ryzen™ 5000 series mobile processors with radeon™ graphics “cezanne”"},{"vendor":"amd","product":"amd ryzen™ 5000 series mobile processors with radeon™ graphics “lucienne”"},{"vendor":"amd","product":"amd ryzen™ 5000 series processors with radeon™ graphics  “barcelo”"},{"vendor":"amd","product":"amd ryzen™ 6000 series processors with radeon™ graphics \"rembrandt\""},{"vendor":"amd","product":"amd ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r”"},{"vendor":"amd","product":"amd ryzen™ 7035 series processors with radeon™ graphics “rembrandt-r”"},{"vendor":"amd","product":"amd ryzen™ threadripper™ 2000 series processors “colfax”"},{"vendor":"amd","product":"amd ryzen™ threadripper™ 3000 series processors “castle peak” hedt"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro 3000wx series processors  “chagall” ws"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro processors “castle peak” ws sp3"},{"vendor":"amd","product":"athlon_3015ce_firmware"},{"vendor":"amd","product":"athlon_3015e_firmware"},{"vendor":"amd","product":"ryzen_3_3100_firmware"},{"vendor":"amd","product":"ryzen_3_3300u_firmware"},{"vendor":"amd","product":"ryzen_3_3300x_firmware"},{"vendor":"amd","product":"ryzen_3_3350u_firmware"},{"vendor":"amd","product":"ryzen_3_4300u_firmware"},{"vendor":"amd","product":"ryzen_3_5100_firmware"},{"vendor":"amd","product":"ryzen_3_5125c_firmware"},{"vendor":"amd","product":"ryzen_3_5400u_firmware"},{"vendor":"amd","product":"ryzen_3_5425u_firmware"},{"vendor":"amd","product":"ryzen_3_7335u_firmware"},{"vendor":"amd","product":"ryzen_5_3450u_firmware"},{"vendor":"amd","product":"ryzen_5_3500_firmware"},{"vendor":"amd","product":"ryzen_5_3500c_firmware"},{"vendor":"amd","product":"ryzen_5_3500u_firmware"},{"vendor":"amd","product":"ryzen_5_3500x_firmware"},{"vendor":"amd","product":"ryzen_5_3550h_firmware"},{"vendor":"amd","product":"ryzen_5_3580u_firmware"},{"vendor":"amd","product":"ryzen_5_3600_firmware"},{"vendor":"amd","product":"ryzen_5_3600x_firmware"},{"vendor":"amd","product":"ryzen_5_3600xt_firmware"},{"vendor":"amd","product":"ryzen_5_4500u_firmware"},{"vendor":"amd","product":"ryzen_5_4600h_firmware"},{"vendor":"amd","product":"ryzen_5_4600hs_firmware"},{"vendor":"amd","product":"ryzen_5_4600u_firmware"},{"vendor":"amd","product":"ryzen_5_4680u_firmware"},{"vendor":"amd","product":"ryzen_5_55003xd_firmware"},{"vendor":"amd","product":"ryzen_5_5500_firmware"},{"vendor":"amd","product":"ryzen_5_5500h_firmware"},{"vendor":"amd","product":"ryzen_5_5500x_firmware"},{"vendor":"amd","product":"ryzen_5_5560u_firmware"},{"vendor":"amd","product":"ryzen_5_56003xd_firmware"},{"vendor":"amd","product":"ryzen_5_5600_firmware"},{"vendor":"amd","product":"ryzen_5_5600h_firmware"},{"vendor":"amd","product":"ryzen_5_5600hs_firmware"},{"vendor":"amd","product":"ryzen_5_5600u_firmware"},{"vendor":"amd","product":"ryzen_5_5600x_firmware"},{"vendor":"amd","product":"ryzen_5_5625u_firmware"},{"vendor":"amd","product":"ryzen_5_6600h_firmware"},{"vendor":"amd","product":"ryzen_5_6600hs_firmware"},{"vendor":"amd","product":"ryzen_5_6600u_firmware"},{"vendor":"amd","product":"ryzen_5_7535hs_firmware"},{"vendor":"amd","product":"ryzen_5_7535u_firmware"},{"vendor":"amd","product":"ryzen_5_pro_3350g_firmware"},{"vendor":"amd","product":"ryzen_5_pro_3350ge_firmware"},{"vendor":"amd","product":"ryzen_5_pro_3400g_firmware"},{"vendor":"amd","product":"ryzen_5_pro_3400ge_firmware"},{"vendor":"amd","product":"ryzen_5_pro_5645_firmware"},{"vendor":"amd","product":"ryzen_7_3700c_firmware"},{"vendor":"amd","product":"ryzen_7_3700u_firmware"},{"vendor":"amd","product":"ryzen_7_3700x_firmware"},{"vendor":"amd","product":"ryzen_7_3750h_firmware"},{"vendor":"amd","product":"ryzen_7_3780u_firmware"},{"vendor":"amd","product":"ryzen_7_3800x_firmware"},{"vendor":"amd","product":"ryzen_7_3800xt_firmware"},{"vendor":"amd","product":"ryzen_7_4700u_firmware"},{"vendor":"amd","product":"ryzen_7_4800h_firmware"},{"vendor":"amd","product":"ryzen_7_4800hs_firmware"},{"vendor":"amd","product":"ryzen_7_4800u_firmware"},{"vendor":"amd","product":"ryzen_7_4980u_firmware"},{"vendor":"amd","product":"ryzen_7_5700_firmware"},{"vendor":"amd","product":"ryzen_7_5700x_firmware"},{"vendor":"amd","product":"ryzen_7_5800_firmware"},{"vendor":"amd","product":"ryzen_7_5800h_firmware"},{"vendor":"amd","product":"ryzen_7_5800hs_firmware"},{"vendor":"amd","product":"ryzen_7_5800u_firmware"},{"vendor":"amd","product":"ryzen_7_5800x_firmware"},{"vendor":"amd","product":"ryzen_7_5825u_firmware"},{"vendor":"amd","product":"ryzen_7_6800h_firmware"},{"vendor":"amd","product":"ryzen_7_6800hs_firmware"},{"vendor":"amd","product":"ryzen_7_6800u_firmware"},{"vendor":"amd","product":"ryzen_7_7735hs_firmware"},{"vendor":"amd","product":"ryzen_7_7735u_firmware"},{"vendor":"amd","product":"ryzen_7_7736u_firmware"},{"vendor":"amd","product":"ryzen_7_pro_5845_firmware"},{"vendor":"amd","product":"ryzen_9_3900_firmware"},{"vendor":"amd","product":"ryzen_9_3900x_firmware"},{"vendor":"amd","product":"ryzen_9_3900xt_firmware"},{"vendor":"amd","product":"ryzen_9_3950x_firmware"},{"vendor":"amd","product":"ryzen_9_4900h_firmware"},{"vendor":"amd","product":"ryzen_9_4900hs_firmware"},{"vendor":"amd","product":"ryzen_9_5900_firmware"},{"vendor":"amd","product":"ryzen_9_5900hs_firmware"},{"vendor":"amd","product":"ryzen_9_5900hx_firmware"},{"vendor":"amd","product":"ryzen_9_5900x_firmware"},{"vendor":"amd","product":"ryzen_9_5950x_firmware"},{"vendor":"amd","product":"ryzen_9_5980hs_firmware"},{"vendor":"amd","product":"ryzen_9_5980hx_firmware"},{"vendor":"amd","product":"ryzen_9_6900hs_firmware"},{"vendor":"amd","product":"ryzen_9_6900hx_firmware"},{"vendor":"amd","product":"ryzen_9_6980hs_firmware"},{"vendor":"amd","product":"ryzen_9_6980hx_firmware"},{"vendor":"amd","product":"ryzen_9_pro_5945_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2920x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2950x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2970wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2990wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3960x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3970x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3990x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3945wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3955wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3975wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3995wx_firmware"},{"vendor":"amd","product":"ryzen™ 3000 series desktop processors “matisse\""}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001","tags":["vendor-advisory","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23820"},{"url":"https://github.com/advisories/GHSA-9fmg-2fcx-q3vf"},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234654-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215823","tags":["report"]},{"url":"https://bugzilla.suse.com/1215831","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20592","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234655-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234660-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234664-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234665-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242376-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20593","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-23820","description":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM potentially leading to arbitrary\ncode execution.","status":"published","published":"2023-11-14T18:52:21.457Z","modified":"2024-08-03T03:51:46.067Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-28749","description":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM potentially leading to arbitrary\ncode execution.","status":"published","published":"2023-11-14T18:52:21Z","modified":"2024-08-03T03:51:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:50.734887Z"}],"ghsa":[{"id":"GHSA-9fmg-2fcx-q3vf","title":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM...","description":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM potentially leading to arbitrary\ncode execution.\n\n\n\n\n\n\n\n\n","status":"published","published":"2023-11-14T21:30:59Z","modified":"2024-02-13T21:30:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:55:37.270786Z"}],"nvd":[{"id":"CVE-2022-23820","description":"Failure to validate the AMD SMM communication buffer\nmay allow an attacker to corrupt the SMRAM potentially leading to arbitrary\ncode execution.","status":"published","published":"2023-11-14T19:15:10.473Z","modified":"2026-06-17T04:30:50.283Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"openSUSE-SU-2024:13475-1","title":"kernel-firmware-all-20231128-1.1 on GA media","description":"These are all security issues fixed in the kernel-firmware-all-20231128-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:09.073409Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2025:14772-1","title":"kernel-firmware-ath12k-20250206-1.1 on GA media","description":"These are all security issues fixed in the kernel-firmware-ath12k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-12T00:00:00Z","modified":"2025-05-07T18:09:32.978954Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2023:4654-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T10:35:24Z","modified":"2026-02-04T04:19:12.854753Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4655-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T10:35:37Z","modified":"2026-02-04T04:31:04.776727Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4660-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T12:06:17Z","modified":"2026-02-04T04:17:37.137883Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4664-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T12:34:02Z","modified":"2026-02-04T02:46:36.112137Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4665-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2023-12-06T12:35:09Z","modified":"2026-02-04T03:34:42.008994Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:2376-1","title":"Security update for kernel-firmware","description":"This update for kernel-firmware fixes the following issues:\n\nUpdate AMD ucode to 20231030 (bsc#1215831):\n\n- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.\n- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.\n- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.\n0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.\n- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.\n- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.\n- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).\n","status":"published","published":"2024-07-09T17:20:51Z","modified":"2026-02-04T03:54:31.78821Z","updated_at":"2026-11-02T15:53:55.136363Z"}]}}