CVE-2022-23820
Fixed in a distro release EPSS <1%CVSS 7.5
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
Products: AMD Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4, AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, 3rd Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7003
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Enterprise Storage 7.1 | kernel-firmware | 20210208-150300.4.19.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-firmware | 20200107-150100.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-firmware | 20200107-150100.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-firmware | 20210208-150300.4.19.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-firmware | 20210208-150300.4.19.1 |
| SUSE Linux Enterprise Micro 5.1 | kernel-firmware | 20210208-150300.4.19.1 |
| SUSE Linux Enterprise Micro 5.2 | kernel-firmware | 20210208-150300.4.19.1 |
| SUSE Linux Enterprise Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 |
| SUSE Linux Enterprise Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 |
| SUSE Linux Enterprise Micro 5.5 | kernel-firmware | 20230724-150500.3.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-firmware | 20220509-150400.4.25.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-firmware | 20230724-150500.3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-firmware | 20190618-5.34.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-firmware | 20200107-150100.3.40.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-firmware | 20200107-150100.3.40.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-firmware | 20210208-150300.4.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-firmware | 20190618-5.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-firmware | 20200107-150100.3.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-firmware | 20200107-150100.3.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-firmware | 20210208-150300.4.19.1 |
| openSUSE Leap 15.4 | kernel-firmware | 20220509-150400.4.25.1 |
| openSUSE Leap 15.5 | kernel-firmware | 20230724-150500.3.9.1 |
| openSUSE Leap Micro 5.3 | kernel-firmware | 20220509-150400.4.25.1 |
| openSUSE Leap Micro 5.4 | kernel-firmware | 20220509-150400.4.25.1 |
| openSUSE Tumbleweed | kernel-firmware | 20231128-1.1 |
| openSUSE Tumbleweed | kernel-firmware-ath12k | 20250206-1.1 |