Description
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | 2nd Gen AMD EPYC™ Processors | various | — |
| AMD | 3rd Gen AMD EPYC™ Processors | various | — |
| AMD | 4th Gen AMD EPYC™ Processors | various | — |
| AMD | AMD EPYC™ Embedded 7002 | various | — |
| AMD | AMD EPYC™ Embedded 7003 | various | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| SLES 15 SP4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLES 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLES for SAP 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES for SAP 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLE Micro 5.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2024:2376-1, SUSE-SU-2023:4660-1 |
| SLE Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.2 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE Micro 5.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLE HPC 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SUSE Enterprise Storage 7.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-firmware | 20231128-1.1 | openSUSE-SU-2024:13475-1 |
| openSUSE Tumbleweed | kernel-firmware-ath12k | 20250206-1.1 | openSUSE-SU-2025:14772-1 |
| openSUSE Leap 15.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| openSUSE Leap Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Advisories 9
- SUSE-SU-2023:4655-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4654-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4660-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2376-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4665-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4664-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13475-1 kernel-firmware-all-20231128-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14772-1 kernel-firmware-ath12k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2023-2916 AMD Prozessor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024