Description
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | AMD Processors | Processor EPYC | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | kernel-firmware | 20220509-150400.4.5.1 | SUSE-SU-2022:1923-1 |
| SLES 15 SP3 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
| SLES 15 SP2 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES 15 SP1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES 15 | kernel-firmware | 20191118-150000.3.42.1 | SUSE-SU-2022:1847-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLES 12 SP4 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLES for SAP 15 SP2 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES for SAP 15 SP1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLES for SAP 15 | kernel-firmware | 20191118-150000.3.42.1 | SUSE-SU-2022:1847-1 |
| SLES for SAP 12 SP5 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLES for SAP 12 SP4 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SLE Micro 5.2 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
| SLE Micro 5.1 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
| SLE HPC 15 SP2 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLE HPC 15 SP1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SLE HPC 15 | kernel-firmware | 20191118-150000.3.42.1 | SUSE-SU-2022:1847-1 |
| SUSE OpenStack Cloud Crowbar 9 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SUSE OpenStack Cloud 9 | kernel-firmware | 20190618-5.25.2 | SUSE-SU-2022:1846-1 |
| SUSE Manager Server 4.1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Manager Retail Branch Server 4.1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Manager Proxy 4.1 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Enterprise Storage 7 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
| SUSE Enterprise Storage 6 | kernel-firmware | 20200107-150100.3.31.1 | SUSE-SU-2022:1751-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-firmware | 20220516-1.1 | openSUSE-SU-2024:12088-1 |
| openSUSE Tumbleweed | kernel-firmware-bluetooth | 20250208-1.1 | openSUSE-SU-2025:14774-1 |
| openSUSE Tumbleweed | kernel-firmware-i915 +1 | 20250210-1.1 | openSUSE-SU-2025:14798-1, openSUSE-SU-2025:14779-1 |
| openSUSE Tumbleweed | kernel-firmware-ti +30 | 20250206-1.1 | openSUSE-SU-2025:14804-1, openSUSE-SU-2025:14801-1, openSUSE-SU-2025:14800-1 |
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.5.1 | SUSE-SU-2022:1923-1 |
| openSUSE Leap 15.3 | kernel-firmware | 20210208-150300.4.10.1 | SUSE-SU-2022:1840-1 |
Advisories 41
- openSUSE-SU-2024:12088-1 kernel-firmware-20220516-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14804-1 kernel-firmware-all-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14782-1 kernel-firmware-liquidio-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14784-1 kernel-firmware-media-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14773-1 kernel-firmware-atheros-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14771-1 kernel-firmware-ath11k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14789-1 kernel-firmware-nfp-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14769-1 kernel-firmware-amdgpu-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1923-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14785-1 kernel-firmware-mediatek-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14770-1 kernel-firmware-ath10k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14790-1 kernel-firmware-nvidia-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14794-1 kernel-firmware-qlogic-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14798-1 kernel-firmware-sound-20250210-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14801-1 kernel-firmware-usb-network-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14779-1 kernel-firmware-i915-20250210-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14786-1 kernel-firmware-mellanox-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14796-1 kernel-firmware-realtek-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14777-1 kernel-firmware-chelsio-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1751-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14778-1 kernel-firmware-dpaa2-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14793-1 kernel-firmware-qcom-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14792-1 kernel-firmware-prestera-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14799-1 kernel-firmware-ti-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14780-1 kernel-firmware-intel-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1840-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14775-1 kernel-firmware-bnx2-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14791-1 kernel-firmware-platform-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14787-1 kernel-firmware-mwifiex-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14774-1 kernel-firmware-bluetooth-20250208-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14781-1 kernel-firmware-iwlwifi-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14800-1 kernel-firmware-ueagle-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14783-1 kernel-firmware-marvell-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14788-1 kernel-firmware-network-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14797-1 kernel-firmware-serial-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1847-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14795-1 kernel-firmware-radeon-20250206-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14776-1 kernel-firmware-brcm-20250206-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- openSUSE-SU-2025:14772-1 kernel-firmware-ath12k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2022:1846-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-0072 AMD Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Feb 16, 2025