vulnerability

SUSE: CVE-2023-31315: SUSE Linux Security Advisory

Severity
6
CVSS
(AV:L/AC:H/Au:M/C:C/I:C/A:C)
Published
08/12/2024
Added
08/15/2024
Modified
02/18/2025

Description

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Solution(s)

suse-upgrade-kernel-firmwaresuse-upgrade-kernel-firmware-allsuse-upgrade-kernel-firmware-amdgpususe-upgrade-kernel-firmware-ath10ksuse-upgrade-kernel-firmware-ath11ksuse-upgrade-kernel-firmware-atherossuse-upgrade-kernel-firmware-bluetoothsuse-upgrade-kernel-firmware-bnx2suse-upgrade-kernel-firmware-brcmsuse-upgrade-kernel-firmware-chelsiosuse-upgrade-kernel-firmware-dpaa2suse-upgrade-kernel-firmware-i915suse-upgrade-kernel-firmware-intelsuse-upgrade-kernel-firmware-iwlwifisuse-upgrade-kernel-firmware-liquidiosuse-upgrade-kernel-firmware-marvellsuse-upgrade-kernel-firmware-mediasuse-upgrade-kernel-firmware-mediateksuse-upgrade-kernel-firmware-mellanoxsuse-upgrade-kernel-firmware-mwifiexsuse-upgrade-kernel-firmware-networksuse-upgrade-kernel-firmware-nfpsuse-upgrade-kernel-firmware-nvidiasuse-upgrade-kernel-firmware-platformsuse-upgrade-kernel-firmware-presterasuse-upgrade-kernel-firmware-qcomsuse-upgrade-kernel-firmware-qlogicsuse-upgrade-kernel-firmware-radeonsuse-upgrade-kernel-firmware-realteksuse-upgrade-kernel-firmware-serialsuse-upgrade-kernel-firmware-soundsuse-upgrade-kernel-firmware-tisuse-upgrade-kernel-firmware-ueaglesuse-upgrade-kernel-firmware-usb-networksuse-upgrade-ucode-amd
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.