Description
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | EPYC™ Processors | various | — |
| AMD | Ryzen™ Series | various | — |
| AMD | Athlon™ Series | various | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | kernel-firmware | 20220509-150400.4.5.1 | SUSE-SU-2022:1923-1 |
| SLES 15 SP3 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
| SLES 15 SP2 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES 15 SP1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES 15 | kernel-firmware | 20191118-150000.3.42.1 | SUSE-SU-2022:1847-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLES 12 SP4 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLES for SAP 15 SP2 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES for SAP 15 SP1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES for SAP 15 | kernel-firmware | 20191118-150000.3.42.1 | SUSE-SU-2022:1847-1 |
| SLES for SAP 12 SP5 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLES for SAP 12 SP4 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLE Micro 5.2 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
| SLE Micro 5.1 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
| SLE HPC 15 SP2 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLE HPC 15 SP1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLE HPC 15 | kernel-firmware | 20191118-150000.3.42.1 | SUSE-SU-2022:1847-1 |
| SUSE OpenStack Cloud Crowbar 9 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SUSE OpenStack Cloud 9 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SUSE Manager Server 4.1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Manager Retail Branch Server 4.1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Manager Proxy 4.1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Enterprise Storage 7 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Enterprise Storage 6 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.5.1 | SUSE-SU-2022:1923-1 |
| openSUSE Leap 15.3 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
Advisories 6
- SUSE-SU-2022:1923-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1751-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1840-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1847-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1846-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-0073 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2025