Description
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | amd64-microcode | 3.20220411.1 | — |
| Debian 13 | amd64-microcode | 3.20220411.1 | — |
| Debian 12 | amd64-microcode | 3.20220411.1 | — |
| Debian 10 | amd64-microcode | 3.20230719.1~deb10u1 | DLA-3511-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | kernel-firmware | 20190618-3.3.1 | SUSE-SU-2019:1792-1 |
| SLES 15 | kernel-firmware | 20190618-3.22.1 | SUSE-SU-2019:1803-1 |
| SLES 12 SP4 | kernel-firmware | 20190618-5.8.1 | SUSE-SU-2019:1802-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP4 | kernel-firmware | 20190618-5.8.1 | SUSE-SU-2019:1802-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-firmware | 20210901-1.2 | openSUSE-SU-2024:10894-1 |
| openSUSE Tumbleweed | kernel-firmware-bluetooth | 20250208-1.1 | openSUSE-SU-2025:14774-1 |
| openSUSE Tumbleweed | kernel-firmware-i915 +1 | 20250210-1.1 | openSUSE-SU-2025:14798-1, openSUSE-SU-2025:14779-1 |
| openSUSE Tumbleweed | kernel-firmware-ti +30 | 20250206-1.1 | openSUSE-SU-2025:14804-1, openSUSE-SU-2025:14801-1, openSUSE-SU-2025:14800-1 |
| openSUSE Leap 15.1 | kernel-firmware | 20190618-lp151.2.6.1 | openSUSE-SU-2019:1770-1 |
| openSUSE Leap 15.0 | kernel-firmware | 20190618-lp151.2.6.1 | openSUSE-SU-2019:1770-1 |
Advisories 40
- DLA-3511-1 amd64-microcode - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2019:1770-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14804-1 kernel-firmware-all-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1802-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14782-1 kernel-firmware-liquidio-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14784-1 kernel-firmware-media-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14773-1 kernel-firmware-atheros-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14771-1 kernel-firmware-ath11k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1792-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14789-1 kernel-firmware-nfp-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14769-1 kernel-firmware-amdgpu-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14785-1 kernel-firmware-mediatek-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14770-1 kernel-firmware-ath10k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14790-1 kernel-firmware-nvidia-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14794-1 kernel-firmware-qlogic-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14798-1 kernel-firmware-sound-20250210-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14801-1 kernel-firmware-usb-network-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14779-1 kernel-firmware-i915-20250210-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14786-1 kernel-firmware-mellanox-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14796-1 kernel-firmware-realtek-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14777-1 kernel-firmware-chelsio-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14778-1 kernel-firmware-dpaa2-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14793-1 kernel-firmware-qcom-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14792-1 kernel-firmware-prestera-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14799-1 kernel-firmware-ti-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14780-1 kernel-firmware-intel-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14775-1 kernel-firmware-bnx2-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14791-1 kernel-firmware-platform-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14787-1 kernel-firmware-mwifiex-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14774-1 kernel-firmware-bluetooth-20250208-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14781-1 kernel-firmware-iwlwifi-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14800-1 kernel-firmware-ueagle-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1803-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14783-1 kernel-firmware-marvell-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14788-1 kernel-firmware-network-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14797-1 kernel-firmware-serial-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14795-1 kernel-firmware-radeon-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14776-1 kernel-firmware-brcm-20250206-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- openSUSE-SU-2025:14772-1 kernel-firmware-ath12k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- openSUSE-SU-2024:10894-1 kernel-firmware-20210901-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- https://seclists.org/fulldisclosure/2019/Jun/46
- https://www.amd.com/en/corporate/product-security
- http://packetstormsecurity.com/files/153436/AMD-Secure-Encrypted-Virtualization-SEV-Key-Recovery.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03943en_us
- openSUSE-SU-2019:1770 vendor-advisory