Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-31351

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity.

Description

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7003 Series Processors

Default version status: affected

  • Milan 100Cunaffected

AMD AMD EPYC™ 9004 Series Processors

Default version status: affected

  • Genoa 100Cunaffected

AMD AMD EPYC™ 8004 Series Processors

Default version status: affected

  • Genoa 100Cunaffected

AMD AMD EPYC™ Embedded 7003 Series Processors

Default version status: affected

  • EmbMilanPI-SP3 1.0.0.9unaffected

AMD AMD EPYC™ Embedded 9004 Series Processors

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.7unaffected

References