Description
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | Ryzen™ 3000 series Desktop Processors “Matisse" | various | — |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” | various | — |
| AMD | AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | various | — |
| AMD | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 | various | — |
| AMD | AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” | Various | — |
| AMD | AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT | various | — |
| AMD | AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 | various | — |
| AMD | AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS | various | — |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | various | — |
| AMD | AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 | various | — |
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 | various | — |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | various | — |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” | various | — |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | various | — |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | various | — |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | various | — |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” | various | — |
| AMD | 3rd Gen AMD EPYC™ Processors | various | — |
| AMD | AMD EPYC™ Embedded 7003 | various | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| SLES 15 SP4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLES 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLES for SAP 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES for SAP 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLE Micro 5.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2024:2376-1, SUSE-SU-2023:4660-1 |
| SLE Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.2 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE Micro 5.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLE HPC 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SUSE Enterprise Storage 7.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-firmware | 20231128-1.1 | openSUSE-SU-2024:13475-1 |
| openSUSE Tumbleweed | kernel-firmware-ath12k | 20250206-1.1 | openSUSE-SU-2025:14772-1 |
| openSUSE Leap 15.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| openSUSE Leap Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Advisories 9
- SUSE-SU-2023:4655-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4654-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4660-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2376-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4665-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4664-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13475-1 kernel-firmware-all-20231128-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14772-1 kernel-firmware-ath12k-20250206-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2023-2916 AMD Prozessor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024