Skip to content
OpenAdvisories
Medium · 6.0 Public exploit CVE-2023-31346 EUVD-2023-35657GHSA-rvmr-97cf-9f3m

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

Published Feb 13, 2024 · Updated Mar 20, 2025 · Assigned by AMD

Vendor: AMD Product: 3rd Gen AMD EPYC™ Processors Product: 4th Gen AMD EPYC™ Processors Package: linux-firmware Ecosystem: Ubuntu

Description

Failure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data
from other guests.

Affected products

VendorProductAffectedFixed
AMD 3rd Gen AMD EPYC™ Processors various —
AMD 4th Gen AMD EPYC™ Processors various —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 linux-firmware No fix yet —
Ubuntu 26.04 LTS linux-firmware No fix yet —
Ubuntu 25.10 linux-firmware No fix yet —
Ubuntu 24.04 LTS linux-firmware No fix yet —
Ubuntu 22.04 LTS linux-firmware No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-firmware No fix yet —
Ubuntu 14.04 LTS linux-firmware No fix yet —
Ubuntu Pro 20.04 LTS linux-firmware No fix yet —
Ubuntu Pro 18.04 LTS linux-firmware No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 iwl100-firmware 39.31.5.1-143.1.el9_4 RHSA-2024:4774
RHEL 9 iwl1000-firmware 1:39.31.5.1-143.1.el9_4 RHSA-2024:4774
RHEL 9 iwl105-firmware +5 18.168.6.1-143.1.el9_4 RHSA-2024:4774
RHEL 9 iwl3160-firmware +1 1:25.30.13.0-143.1.el9_4 RHSA-2024:4774
RHEL 9 iwl5000-firmware 8.83.5.1_1-143.1.el9_4 RHSA-2024:4774
RHEL 9 iwl5150-firmware 8.24.2.2-143.1.el9_4 RHSA-2024:4774
RHEL 9 iwl6050-firmware 41.28.5.1-143.1.el9_4 RHSA-2024:4774
RHEL 9 linux-firmware +3 20240603-143.1.el9_4 RHSA-2024:4774
RHEL 8 iwl100-firmware 39.31.5.1-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl1000-firmware 1:39.31.5.1-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl105-firmware +5 18.168.6.1-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl3160-firmware +1 1:25.30.13.0-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl3945-firmware 15.32.2.9-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl4965-firmware 228.61.2.24-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl5000-firmware 8.83.5.1_1-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl5150-firmware 8.24.2.2-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl6000-firmware 9.221.4.1-122.el8_10.1 RHSA-2024:4262
RHEL 8 iwl6050-firmware 41.28.5.1-122.el8_10.1 RHSA-2024:4262
RHEL 8 libertas-usb8388-firmware 2:20240610-122.git90df68d2.el8_10 RHSA-2024:4262
RHEL 8 linux-firmware +3 20240610-122.git90df68d2.el8_10 RHSA-2024:4262
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.2 EUS iwl100-firmware 39.31.5.1-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS iwl1000-firmware 1:39.31.5.1-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS iwl105-firmware +5 18.168.6.1-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS iwl3160-firmware +1 1:25.30.13.0-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS iwl5000-firmware 8.83.5.1_1-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS iwl5150-firmware 8.24.2.2-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS iwl6050-firmware 41.28.5.1-138.1.el9_2 RHSA-2024:5640
RHEL 9.2 EUS linux-firmware +3 20240603-138.1.el9_2 RHSA-2024:5640
RHEL 8.8 EUS iwl100-firmware 39.31.5.1-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl1000-firmware 1:39.31.5.1-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl105-firmware +5 18.168.6.1-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl3160-firmware +1 1:25.30.13.0-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl3945-firmware 15.32.2.9-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl4965-firmware 228.61.2.24-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl5000-firmware 8.83.5.1_1-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl5150-firmware 8.24.2.2-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl6000-firmware 9.221.4.1-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS iwl6050-firmware 41.28.5.1-118.1.el8_8.1 RHSA-2024:4741
RHEL 8.8 EUS libertas-usb8388-firmware 2:20240610-118.1.git90df68d2.el8_8 RHSA-2024:4741
RHEL 8.8 EUS linux-firmware +3 20240610-118.1.git90df68d2.el8_8 RHSA-2024:4741
RHEL 8.6 TUS iwl100-firmware 39.31.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl1000-firmware 1:39.31.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl105-firmware +5 18.168.6.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl3160-firmware +1 1:25.30.13.0-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl3945-firmware 15.32.2.9-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl4965-firmware 228.61.2.24-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl5000-firmware 8.83.5.1_1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl5150-firmware 8.24.2.2-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl6000-firmware 9.221.4.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS iwl6050-firmware 41.28.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 TUS libertas-usb8388-firmware 2:20240610-114.1.git90df68d2.el8_6 RHSA-2024:4409
RHEL 8.6 TUS linux-firmware +3 20240610-114.1.git90df68d2.el8_6 RHSA-2024:4409
RHEL 8.6 E4S iwl100-firmware 39.31.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl1000-firmware 1:39.31.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl105-firmware +5 18.168.6.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl3160-firmware +1 1:25.30.13.0-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl3945-firmware 15.32.2.9-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl4965-firmware 228.61.2.24-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl5000-firmware 8.83.5.1_1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl5150-firmware 8.24.2.2-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl6000-firmware 9.221.4.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S iwl6050-firmware 41.28.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 E4S libertas-usb8388-firmware 2:20240610-114.1.git90df68d2.el8_6 RHSA-2024:4409
RHEL 8.6 E4S linux-firmware +3 20240610-114.1.git90df68d2.el8_6 RHSA-2024:4409
RHEL 8.6 AUS iwl100-firmware 39.31.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl1000-firmware 1:39.31.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl105-firmware +5 18.168.6.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl3160-firmware +1 1:25.30.13.0-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl3945-firmware 15.32.2.9-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl4965-firmware 228.61.2.24-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl5000-firmware 8.83.5.1_1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl5150-firmware 8.24.2.2-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl6000-firmware 9.221.4.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS iwl6050-firmware 41.28.5.1-114.1.el8_6.1 RHSA-2024:4409
RHEL 8.6 AUS libertas-usb8388-firmware 2:20240610-114.1.git90df68d2.el8_6 RHSA-2024:4409
RHEL 8.6 AUS linux-firmware +3 20240610-114.1.git90df68d2.el8_6 RHSA-2024:4409
RHEL 8.4 TUS iwl100-firmware 39.31.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl1000-firmware 1:39.31.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl105-firmware +5 18.168.6.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl3160-firmware +1 1:25.30.13.0-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl3945-firmware 15.32.2.9-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl4965-firmware 228.61.2.24-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl5000-firmware 8.83.5.1_1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl5150-firmware 8.24.2.2-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl6000-firmware 9.221.4.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS iwl6050-firmware 41.28.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 TUS libertas-usb8388-firmware 2:20240610-106.1.git90df68d2.el8_4 RHSA-2024:4733
RHEL 8.4 TUS linux-firmware +3 20240610-106.1.git90df68d2.el8_4 RHSA-2024:4733
RHEL 8.4 E4S iwl100-firmware 39.31.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl1000-firmware 1:39.31.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl105-firmware +5 18.168.6.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl3160-firmware +1 1:25.30.13.0-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl3945-firmware 15.32.2.9-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl4965-firmware 228.61.2.24-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl5000-firmware 8.83.5.1_1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl5150-firmware 8.24.2.2-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl6000-firmware 9.221.4.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S iwl6050-firmware 41.28.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 E4S libertas-usb8388-firmware 2:20240610-106.1.git90df68d2.el8_4 RHSA-2024:4733
RHEL 8.4 E4S linux-firmware +3 20240610-106.1.git90df68d2.el8_4 RHSA-2024:4733
RHEL 8.4 AUS iwl100-firmware 39.31.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl1000-firmware 1:39.31.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl105-firmware +5 18.168.6.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl3160-firmware +1 1:25.30.13.0-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl3945-firmware 15.32.2.9-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl4965-firmware 228.61.2.24-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl5000-firmware 8.83.5.1_1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl5150-firmware 8.24.2.2-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl6000-firmware 9.221.4.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS iwl6050-firmware 41.28.5.1-106.1.el8_4.1 RHSA-2024:4733
RHEL 8.4 AUS libertas-usb8388-firmware 2:20240610-106.1.git90df68d2.el8_4 RHSA-2024:4733
RHEL 8.4 AUS linux-firmware +3 20240610-106.1.git90df68d2.el8_4 RHSA-2024:4733
RHEL 8.2 AUS iwl100-firmware 39.31.5.1-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl1000-firmware 1:39.31.5.1-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl105-firmware +5 18.168.6.1-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl3160-firmware +1 1:25.30.13.0-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl3945-firmware 15.32.2.9-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl4965-firmware 228.61.2.24-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl5000-firmware 8.83.5.1_1-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl5150-firmware 8.24.2.2-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl6000-firmware 9.221.4.1-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS iwl6050-firmware 41.28.5.1-102.2.el8_2.1 RHSA-2024:5883
RHEL 8.2 AUS libertas-usb8388-firmware 2:20240715-102.2.git4c8fb21e.el8_2 RHSA-2024:5883
RHEL 8.2 AUS linux-firmware +3 20240715-102.2.git4c8fb21e.el8_2 RHSA-2024:5883

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 iwl100-firmware 39.31.5.1-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 iwl1000-firmware 1:39.31.5.1-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 iwl105-firmware +5 18.168.6.1-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 iwl3160-firmware +1 1:25.30.13.0-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 iwl5000-firmware 8.83.5.1_1-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 iwl5150-firmware 8.24.2.2-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 iwl6050-firmware 41.28.5.1-143.1.el9_4 ALSA-2024:4774
AlmaLinux 9 linux-firmware +3 20240603-143.1.el9_4 ALSA-2024:4774
AlmaLinux 8 iwl100-firmware 39.31.5.1-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl1000-firmware 1:39.31.5.1-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl105-firmware +5 18.168.6.1-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl3160-firmware +1 1:25.30.13.0-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl3945-firmware 15.32.2.9-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl4965-firmware 228.61.2.24-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl5000-firmware 8.83.5.1_1-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl5150-firmware 8.24.2.2-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl6000-firmware 9.221.4.1-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 iwl6050-firmware 41.28.5.1-122.el8_10.1 ALSA-2024:4262
AlmaLinux 8 libertas-usb8388-firmware 2:20240610-122.git90df68d2.el8_10 ALSA-2024:4262
AlmaLinux 8 linux-firmware +3 20240610-122.git90df68d2.el8_10 ALSA-2024:4262

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 linux-firmware 20240610-122.git90df68d2.el8_10 RLSA-2024:4262

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 11

References