Description
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | 3rd Gen AMD EPYC™ Processors | various | — |
| AMD | 4th Gen AMD EPY™ Processors | various | — |
| AMD | AMD EPYC™ Embedded 7003 | various | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| SLES 15 SP4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLES 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLES for SAP 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLES for SAP 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLES for SAP 12 SP5 | kernel-firmware | 20190618-5.34.1 | SUSE-SU-2023:4655-1 |
| SLE Micro 5.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2024:2376-1, SUSE-SU-2023:4660-1 |
| SLE Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| SLE Micro 5.2 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE Micro 5.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
| SLE HPC 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SLE HPC 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 | SUSE-SU-2023:4665-1 |
| SUSE Enterprise Storage 7.1 | kernel-firmware | 20210208-150300.4.19.1 | SUSE-SU-2023:4654-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | kernel-firmware | 20230724-150500.3.9.1 | SUSE-SU-2023:4660-1 |
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
| openSUSE Leap Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 | SUSE-SU-2023:4664-1 |
Advisories 7
- SUSE-SU-2023:4655-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4654-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4660-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2376-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4665-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4664-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2916 AMD Prozessor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024