Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-20584

IOMMU improperly handles certain special address

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7003 Processors

Default version status: affected

  • MilanPI 1.0.0.Cunaffected

AMD AMD EPYC™ 9004 Processors

Default version status: affected

  • GenoaPI 1.0.0.Bunaffected

References