Skip to content
Fencer Intel
high 7.5

CVE-2022-23820 json

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execu…

published 2y ago modified 4mo ago also EUVD-2022-28749

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 53%
public exploits
0
none known

Summary

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.

Patch / fix

  • kernel-firmware SLE Module for Basesystem 15 SP5, SLE Micro 5.5, openSUSE Leap 15.5 20230724-150500.3.9.1
  • kernel-firmware SLE Module for Basesystem 15 SP4, SLE Micro 5.4, SLE Micro 5.3 +3 more 20220509-150400.4.25.1
  • kernel-firmware SLES for SAP 12 SP5, SLES 12 SP5 20190618-5.34.1
  • kernel-firmware SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Micro 5.2 +4 more 20210208-150300.4.19.1
  • kernel-firmware SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES 15 SP2-LTSS +3 more 20200107-150100.3.40.1

suse advisories SUSE-SU-2024:2376-1SUSE-SU-2023:4665-1SUSE-SU-2023:4664-1SUSE-SU-2023:4660-1SUSE-SU-2023:4655-1SUSE-SU-2023:4654-1

  • kernel-firmware-ath12k openSUSE Tumbleweed 20250206-1.1
  • kernel-firmware openSUSE Tumbleweed 20231128-1.1

opensuse advisories openSUSE-SU-2025:14772-1openSUSE-SU-2024:13475-1

Is CVE-2022-23820 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.70% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • AMD Ryzen™ 3000 series Desktop Processors “Matisse"
  • AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
  • AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
  • AMD AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
  • AMD AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT
  • AMD AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3
  • AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”
  • AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6
  • AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
  • AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”
  • AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
  • AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”
  • AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”
  • AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”
  • AMD 3rd Gen AMD EPYC™ Processors
  • AMD AMD EPYC™ Embedded 7003

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.