{"id":"SUSE-SU-2024:3081-1","summary":"Security update for kernel-firmware","details":"This update for kernel-firmware fixes the following issues:\n\n- CVE-2023-31315: Fixed validation in a model specific register (MSR) that lead to modification of SMM configuration by malicious program with ring0 access (bsc#1229069)\n","modified":"2026-02-04T03:37:09.109796Z","published":"2024-09-02T14:44:35Z","related":["CVE-2023-31315"],"upstream":["CVE-2023-31315"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243081-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1229069"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-31315"}],"affected":[{"package":{"name":"kernel-firmware","ecosystem":"SUSE:Linux Enterprise Micro 5.5","purl":"pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.12.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-firmware-ath10k":"20230724-150500.3.12.1","kernel-firmware-marvell":"20230724-150500.3.12.1","kernel-firmware-nvidia":"20230724-150500.3.12.1","kernel-firmware-radeon":"20230724-150500.3.12.1","kernel-firmware-all":"20230724-150500.3.12.1","kernel-firmware-amdgpu":"20230724-150500.3.12.1","kernel-firmware-usb-network":"20230724-150500.3.12.1","kernel-firmware-dpaa2":"20230724-150500.3.12.1","kernel-firmware-i915":"20230724-150500.3.12.1","kernel-firmware-atheros":"20230724-150500.3.12.1","kernel-firmware-brcm":"20230724-150500.3.12.1","kernel-firmware-mediatek":"20230724-150500.3.12.1","kernel-firmware-prestera":"20230724-150500.3.12.1","kernel-firmware-qcom":"20230724-150500.3.12.1","kernel-firmware-serial":"20230724-150500.3.12.1","kernel-firmware-ueagle":"20230724-150500.3.12.1","kernel-firmware-iwlwifi":"20230724-150500.3.12.1","kernel-firmware-nfp":"20230724-150500.3.12.1","kernel-firmware-qlogic":"20230724-150500.3.12.1","kernel-firmware-realtek":"20230724-150500.3.12.1","kernel-firmware-sound":"20230724-150500.3.12.1","kernel-firmware-platform":"20230724-150500.3.12.1","kernel-firmware-ath11k":"20230724-150500.3.12.1","kernel-firmware-bluetooth":"20230724-150500.3.12.1","kernel-firmware-bnx2":"20230724-150500.3.12.1","kernel-firmware-mellanox":"20230724-150500.3.12.1","kernel-firmware-mwifiex":"20230724-150500.3.12.1","kernel-firmware-network":"20230724-150500.3.12.1","ucode-amd":"20230724-150500.3.12.1","kernel-firmware-chelsio":"20230724-150500.3.12.1","kernel-firmware-intel":"20230724-150500.3.12.1","kernel-firmware-ti":"20230724-150500.3.12.1","kernel-firmware-liquidio":"20230724-150500.3.12.1","kernel-firmware-media":"20230724-150500.3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3081-1.json"}},{"package":{"name":"kernel-firmware","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","purl":"pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.12.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-firmware-ath10k":"20230724-150500.3.12.1","kernel-firmware-mediatek":"20230724-150500.3.12.1","kernel-firmware-mellanox":"20230724-150500.3.12.1","kernel-firmware-all":"20230724-150500.3.12.1","kernel-firmware-dpaa2":"20230724-150500.3.12.1","kernel-firmware-qcom":"20230724-150500.3.12.1","kernel-firmware-qlogic":"20230724-150500.3.12.1","kernel-firmware-sound":"20230724-150500.3.12.1","kernel-firmware-amdgpu":"20230724-150500.3.12.1","kernel-firmware-atheros":"20230724-150500.3.12.1","kernel-firmware-bnx2":"20230724-150500.3.12.1","kernel-firmware-marvell":"20230724-150500.3.12.1","kernel-firmware-ath11k":"20230724-150500.3.12.1","kernel-firmware-intel":"20230724-150500.3.12.1","kernel-firmware-mwifiex":"20230724-150500.3.12.1","kernel-firmware-nvidia":"20230724-150500.3.12.1","kernel-firmware-prestera":"20230724-150500.3.12.1","kernel-firmware-serial":"20230724-150500.3.12.1","kernel-firmware-bluetooth":"20230724-150500.3.12.1","kernel-firmware-liquidio":"20230724-150500.3.12.1","kernel-firmware-realtek":"20230724-150500.3.12.1","kernel-firmware-ti":"20230724-150500.3.12.1","kernel-firmware-usb-network":"20230724-150500.3.12.1","kernel-firmware-chelsio":"20230724-150500.3.12.1","kernel-firmware-media":"20230724-150500.3.12.1","kernel-firmware-nfp":"20230724-150500.3.12.1","kernel-firmware-radeon":"20230724-150500.3.12.1","ucode-amd":"20230724-150500.3.12.1","kernel-firmware-i915":"20230724-150500.3.12.1","kernel-firmware-iwlwifi":"20230724-150500.3.12.1","kernel-firmware-network":"20230724-150500.3.12.1","kernel-firmware-platform":"20230724-150500.3.12.1","kernel-firmware-ueagle":"20230724-150500.3.12.1","kernel-firmware-brcm":"20230724-150500.3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3081-1.json"}},{"package":{"name":"kernel-firmware","ecosystem":"openSUSE:Leap Micro 5.5","purl":"pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.12.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-firmware-brcm":"20230724-150500.3.12.1","kernel-firmware-i915":"20230724-150500.3.12.1","kernel-firmware-mellanox":"20230724-150500.3.12.1","kernel-firmware-qlogic":"20230724-150500.3.12.1","kernel-firmware-sound":"20230724-150500.3.12.1","kernel-firmware-ti":"20230724-150500.3.12.1","kernel-firmware-ath11k":"20230724-150500.3.12.1","kernel-firmware-atheros":"20230724-150500.3.12.1","kernel-firmware-qcom":"20230724-150500.3.12.1","kernel-firmware-serial":"20230724-150500.3.12.1","kernel-firmware-all":"20230724-150500.3.12.1","kernel-firmware-chelsio":"20230724-150500.3.12.1","kernel-firmware-network":"20230724-150500.3.12.1","kernel-firmware-nvidia":"20230724-150500.3.12.1","kernel-firmware-prestera":"20230724-150500.3.12.1","kernel-firmware-radeon":"20230724-150500.3.12.1","kernel-firmware-iwlwifi":"20230724-150500.3.12.1","kernel-firmware-marvell":"20230724-150500.3.12.1","kernel-firmware-media":"20230724-150500.3.12.1","kernel-firmware-nfp":"20230724-150500.3.12.1","kernel-firmware-platform":"20230724-150500.3.12.1","kernel-firmware-realtek":"20230724-150500.3.12.1","kernel-firmware-dpaa2":"20230724-150500.3.12.1","kernel-firmware-mwifiex":"20230724-150500.3.12.1","kernel-firmware-liquidio":"20230724-150500.3.12.1","kernel-firmware-amdgpu":"20230724-150500.3.12.1","kernel-firmware-bluetooth":"20230724-150500.3.12.1","kernel-firmware-bnx2":"20230724-150500.3.12.1","kernel-firmware-intel":"20230724-150500.3.12.1","kernel-firmware-mediatek":"20230724-150500.3.12.1","kernel-firmware-usb-network":"20230724-150500.3.12.1","kernel-firmware-ueagle":"20230724-150500.3.12.1","kernel-firmware-ath10k":"20230724-150500.3.12.1","ucode-amd":"20230724-150500.3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3081-1.json"}},{"package":{"name":"kernel-firmware","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230724-150500.3.12.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-firmware-ath11k":"20230724-150500.3.12.1","kernel-firmware-bnx2":"20230724-150500.3.12.1","kernel-firmware-iwlwifi":"20230724-150500.3.12.1","kernel-firmware-mellanox":"20230724-150500.3.12.1","kernel-firmware-qcom":"20230724-150500.3.12.1","kernel-firmware-usb-network":"20230724-150500.3.12.1","ucode-amd":"20230724-150500.3.12.1","kernel-firmware-nvidia":"20230724-150500.3.12.1","kernel-firmware":"20230724-150500.3.12.1","kernel-firmware-liquidio":"20230724-150500.3.12.1","kernel-firmware-marvell":"20230724-150500.3.12.1","kernel-firmware-platform":"20230724-150500.3.12.1","kernel-firmware-radeon":"20230724-150500.3.12.1","kernel-firmware-all":"20230724-150500.3.12.1","kernel-firmware-ath10k":"20230724-150500.3.12.1","kernel-firmware-brcm":"20230724-150500.3.12.1","kernel-firmware-intel":"20230724-150500.3.12.1","kernel-firmware-mwifiex":"20230724-150500.3.12.1","kernel-firmware-ueagle":"20230724-150500.3.12.1","kernel-firmware-amdgpu":"20230724-150500.3.12.1","kernel-firmware-bluetooth":"20230724-150500.3.12.1","kernel-firmware-nfp":"20230724-150500.3.12.1","kernel-firmware-sound":"20230724-150500.3.12.1","kernel-firmware-ti":"20230724-150500.3.12.1","kernel-firmware-atheros":"20230724-150500.3.12.1","kernel-firmware-media":"20230724-150500.3.12.1","kernel-firmware-network":"20230724-150500.3.12.1","kernel-firmware-qlogic":"20230724-150500.3.12.1","kernel-firmware-serial":"20230724-150500.3.12.1","kernel-firmware-dpaa2":"20230724-150500.3.12.1","kernel-firmware-i915":"20230724-150500.3.12.1","kernel-firmware-prestera":"20230724-150500.3.12.1","kernel-firmware-realtek":"20230724-150500.3.12.1","kernel-firmware-chelsio":"20230724-150500.3.12.1","kernel-firmware-mediatek":"20230724-150500.3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3081-1.json"}}],"schema_version":"1.7.3"}