Description
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS | various | — |
| AMD | 4th Gen AMD EPYC™ Processors | various | — |
| AMD | AMD EPYC™ Embedded 9003 | various | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| SLES 15 SP4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLES 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLES for SAP 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES for SAP 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLE Micro 5.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2024:2376-1, SUSE-SU-2023:4660-1 |
| SLE Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.2 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE Micro 5.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLE HPC 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SUSE Enterprise Storage 7.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| openSUSE Leap Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Advisories 7
- SUSE-SU-2023:4655-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4654-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4660-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2376-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4665-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4664-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2916 AMD Prozessor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024