Description
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | AMD EPYC™ 7003 Processors | — | MilanPI 1.0.0.C |
| AMD | AMD EPYC™ 9004 Processors | — | GenoaPI 1.0.0.B |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | amd64-microcode | 3.20240820.1 | — |
| Debian 13 | amd64-microcode | 3.20240820.1 | — |
| Debian 12 | amd64-microcode | 3.20240820.1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | amd64-microcode | 3.20250311.1ubuntu0.24.04.1 | USN-7561-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | iwl100-firmware | 39.31.5.1-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | iwl1000-firmware | 1:39.31.5.1-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | iwl105-firmware +5 | 18.168.6.1-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | iwl3160-firmware +1 | 1:25.30.13.0-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | iwl5000-firmware | 8.83.5.1_1-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | iwl5150-firmware | 8.24.2.2-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | iwl6050-firmware | 41.28.5.1-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 9 | linux-firmware +3 | 20240905-143.3.el9_4 | RHSA-2024:7484 |
| RHEL 8 | iwl100-firmware | 39.31.5.1-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl1000-firmware | 1:39.31.5.1-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl105-firmware +5 | 18.168.6.1-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl3160-firmware +1 | 1:25.30.13.0-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl3945-firmware | 15.32.2.9-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl4965-firmware | 228.61.2.24-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl5000-firmware | 8.83.5.1_1-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl5150-firmware | 8.24.2.2-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl6000-firmware | 9.221.4.1-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | iwl6050-firmware | 41.28.5.1-124.el8_10.1 | RHSA-2024:7481 |
| RHEL 8 | libertas-usb8388-firmware | 2:20240827-124.git3cff7109.el8_10 | RHSA-2024:7481 |
| RHEL 8 | linux-firmware +3 | 20240827-124.git3cff7109.el8_10 | RHSA-2024:7481 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | iwl100-firmware | 39.31.5.1-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | iwl1000-firmware | 1:39.31.5.1-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | iwl105-firmware +5 | 18.168.6.1-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | iwl3160-firmware +1 | 1:25.30.13.0-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | iwl5000-firmware | 8.83.5.1_1-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | iwl5150-firmware | 8.24.2.2-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | iwl6050-firmware | 41.28.5.1-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 9.2 EUS | linux-firmware +3 | 20240905-138.3.el9_2 | RHSA-2024:7483 |
| RHEL 8.6 TUS | iwl100-firmware | 39.31.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl1000-firmware | 1:39.31.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl105-firmware +5 | 18.168.6.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl3160-firmware +1 | 1:25.30.13.0-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl3945-firmware | 15.32.2.9-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl4965-firmware | 228.61.2.24-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl5000-firmware | 8.83.5.1_1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl5150-firmware | 8.24.2.2-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl6000-firmware | 9.221.4.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | iwl6050-firmware | 41.28.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 TUS | libertas-usb8388-firmware | 2:20240827-114.3.git3cff7109.el8_6 | RHSA-2024:7418 |
| RHEL 8.6 TUS | linux-firmware +3 | 20240827-114.3.git3cff7109.el8_6 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl100-firmware | 39.31.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl1000-firmware | 1:39.31.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl105-firmware +5 | 18.168.6.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl3160-firmware +1 | 1:25.30.13.0-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl3945-firmware | 15.32.2.9-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl4965-firmware | 228.61.2.24-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl5000-firmware | 8.83.5.1_1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl5150-firmware | 8.24.2.2-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl6000-firmware | 9.221.4.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | iwl6050-firmware | 41.28.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 E4S | libertas-usb8388-firmware | 2:20240827-114.3.git3cff7109.el8_6 | RHSA-2024:7418 |
| RHEL 8.6 E4S | linux-firmware +3 | 20240827-114.3.git3cff7109.el8_6 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl100-firmware | 39.31.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl1000-firmware | 1:39.31.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl105-firmware +5 | 18.168.6.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl3160-firmware +1 | 1:25.30.13.0-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl3945-firmware | 15.32.2.9-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl4965-firmware | 228.61.2.24-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl5000-firmware | 8.83.5.1_1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl5150-firmware | 8.24.2.2-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl6000-firmware | 9.221.4.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | iwl6050-firmware | 41.28.5.1-114.3.el8_6.1 | RHSA-2024:7418 |
| RHEL 8.6 AUS | libertas-usb8388-firmware | 2:20240827-114.3.git3cff7109.el8_6 | RHSA-2024:7418 |
| RHEL 8.6 AUS | linux-firmware +3 | 20240827-114.3.git3cff7109.el8_6 | RHSA-2024:7418 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | iwl100-firmware | 39.31.5.1-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | iwl1000-firmware | 1:39.31.5.1-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | iwl105-firmware +5 | 18.168.6.1-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | iwl3160-firmware +1 | 1:25.30.13.0-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | iwl5000-firmware | 8.83.5.1_1-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | iwl5150-firmware | 8.24.2.2-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | iwl6050-firmware | 41.28.5.1-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 9 | linux-firmware +3 | 20240905-143.3.el9_4 | ALSA-2024:7484 |
| AlmaLinux 8 | iwl100-firmware | 39.31.5.1-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl1000-firmware | 1:39.31.5.1-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl105-firmware +5 | 18.168.6.1-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl3160-firmware +1 | 1:25.30.13.0-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl3945-firmware | 15.32.2.9-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl4965-firmware | 228.61.2.24-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl5000-firmware | 8.83.5.1_1-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl5150-firmware | 8.24.2.2-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl6000-firmware | 9.221.4.1-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | iwl6050-firmware | 41.28.5.1-124.el8_10.1 | ALSA-2024:7481 |
| AlmaLinux 8 | libertas-usb8388-firmware | 2:20240827-124.git3cff7109.el8_10 | ALSA-2024:7481 |
| AlmaLinux 8 | linux-firmware +3 | 20240827-124.git3cff7109.el8_10 | ALSA-2024:7481 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | linux-firmware | 20240827-124.git3cff7109.el8_10 | RLSA-2024:7481 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | iwl100-firmware +1 | 999:39.31.5.1-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl105-firmware +5 | 999:18.168.6.1-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl3160-firmware +1 | 999:25.30.13.0-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl3945-firmware | 999:15.32.2.9-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl4965-firmware | 999:228.61.2.24-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl5000-firmware | 999:8.83.5.1_1-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl5150-firmware | 999:8.24.2.2-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl6000-firmware | 999:9.221.4.1-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwl6050-firmware | 999:41.28.5.1-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | iwlax2xx-firmware | 999:20241003-999.35.el9 | ELSA-2024-12797 |
| Oracle Linux 7 | linux-firmware +8 | 999:20241003-999.35.git95bfe086.el9 | ELSA-2024-12797 |
Advisories 10
- RHSA-2024:7418 Red Hat Security Advisory: linux-firmware security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2024:7481 Important: linux-firmware security update AlmaLinux Security Advisories · Nov 9, 2026
- ALSA-2024:7484 Moderate: linux-firmware security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2024-1837 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 12, 2026
- RHSA-2024:7484 Red Hat Security Advisory: linux-firmware security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:7481 Red Hat Security Advisory: linux-firmware security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:7483 Red Hat Security Advisory: linux-firmware security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- USN-7561-1 amd64-microcode vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- RLSA-2024:7481 Important: linux-firmware security update Rocky Linux Security Advisories · May 7, 2025
- ELSA-2024-12797 Moderate: linux-firmware security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 22, 2024