Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-20582

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potenti

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9004 Processors

Default version status: affected

  • GenoaPI 1.0.0.Cunaffected
  • SEV FW1.55.36unaffected

AMD AMD EPYC™ Embedded 9004

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.7unaffected

References