Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2023-20585

Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7003 Series Processors

Default version status: affected

  • SEV FW 1.37.23unaffected

AMD AMD EPYC™ 9004 Series Processors

Default version status: affected

  • SEV FW 1.37.31unaffected

AMD AMD EPYC™ Embedded 7003 Series Processors

Default version status: affected

  • EmbMilanPI-SP3 1.0.0.Bunaffected

AMD AMD EPYC™ Embedded 9004 Series Processors

Default version status: affected

  • EmbGenoaPI-1.0.0.Aunaffected

References