PT-2023-12740 · Suse · Suse

Benjamin Serebrin · Published 2023-11-14 · Updated 2024-07-09 · CVE-2022-23830

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue concerns a potential limited loss of guest memory integrity due to SMM configuration not being immutable as intended when SNP is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-23830

SUSE-SU-2023:4654-1

SUSE-SU-2023:4655-1

SUSE-SU-2023:4660-1

SUSE-SU-2023:4664-1

SUSE-SU-2023:4665-1

SUSE-SU-2024:2376-1

Affected Products

Suse

References · 32

• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4655-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2376-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4665-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4654-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4664-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4660-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23830 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23830 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-46766 · Note
• https://suse.com/security/cve/CVE-2023-20519 · Note
• https://suse.com/security/cve/CVE-2023-20526 · Note
• https://suse.com/security/cve/CVE-2022-23820 · Note
• https://suse.com/support/update/announcement/2023/suse-su-20234655-1 · Note