Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3389-1

Опубликовано: 23 авг. 2023
Источник: suse-cvrf

Описание

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

  • CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. (bsc#1213287)

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
kernel-firmware-20200107-150100.3.37.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
kernel-firmware-20200107-150100.3.37.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
kernel-firmware-20200107-150100.3.37.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
kernel-firmware-20200107-150100.3.37.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
kernel-firmware-20200107-150100.3.37.1
ucode-amd-20200107-150100.3.37.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
kernel-firmware-20200107-150100.3.37.1
ucode-amd-20200107-150100.3.37.1
SUSE Linux Enterprise Server 15 SP1-LTSS
kernel-firmware-20200107-150100.3.37.1
ucode-amd-20200107-150100.3.37.1
SUSE Linux Enterprise Server 15 SP2-LTSS
kernel-firmware-20200107-150100.3.37.1
ucode-amd-20200107-150100.3.37.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
kernel-firmware-20200107-150100.3.37.1
ucode-amd-20200107-150100.3.37.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
kernel-firmware-20200107-150100.3.37.1
ucode-amd-20200107-150100.3.37.1

Описание

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.


Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-firmware-20200107-150100.3.37.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-firmware-20200107-150100.3.37.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:kernel-firmware-20200107-150100.3.37.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:kernel-firmware-20200107-150100.3.37.1

Ссылки