USN-8031-2: Linux kernel (GCP FIPS) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

The vulnerability of the Secure Encrypted Virtualization (SEV) technology of AMD’s microprogramming processor allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Secure Encrypted Virtualization SEV technology of AMD microprocessors is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality of the protected information...

The vulnerability of the Secure Encrypted Virtualization (SEV) technology of AMD’s microprogramming processor allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Secure Encrypted Virtualization SEV technology of AMD microprocessors is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality of the protected information...

The vulnerability of AMD Secure Processor (ASP) microprogramming software, related to integer overflow, allows a hacker to execute arbitrary code.

The vulnerability of AMD Secure Processor ASP microprogramming software is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the RMP (Reverse Map Table) component of AMD’s microprogramming software allows attackers to compromise the integrity of protected information.

The vulnerability of the RMP Reverse Map Table component of AMD’s microprogramming system processors is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

USN-8028-4 linux-aws-fips, linux-fips vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

SUSE-SU-2026:20450-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - Update AMD ucode to 20251203 bsc1256483...

SUSE CVE-2026-23190

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops...

UBUNTU-CVE-2026-23190

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops...

CVE-2026-23190

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops...

CVE-2026-23190

Mode C: CVE-2026-23190 affects the Linux kernel ASoC/amd driver; the issue is a memory leak in acp3x PDM DMA ops. Public advisories (Mageia, SUSE/OpenSUSE, Oracle Linux, Debian) confirm upstream fix in kernel. Remediation is applying the upstream patch (memory leak in acp3x pdm dma ops) or upgrad...

CVE-2026-23190 ASoC: amd: fix memory leak in acp3x pdm dma ops

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops...

CVE-2025-29951

A buffer overflow in the AMD Secure Processor ASP bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution...

CVE-2025-48503

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2025-61969

Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31323

Type confusion in the AMD Secure Processor ASP could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent XGMI TA leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability...

CVE-2024-36319

Debug code left active in AMD's Video Decoder Engine Firmware VCN FW could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system...

CVE-2023-31313

An unintended proxy or intermediary in the AMD power management firmware PMFW could allow a privileged attacker to send malformed messages to the system management unit SMU potentially resulting in arbitrary code execution...

CVE-2026-1827

The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's codeflask shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

USN-8028-2: Linux kernel (Real-time) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...