Skip to content
Sign in
5.3 Medium

CVE-2023-20584 IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an…

Description

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7003 Processors Versions not published
AMD EPYC™ 9004 Processors Versions not published

Other CVEs of AMD EPYC™ 7003 Processors

The 8 CVEs of AMD EPYC™ 7003 Processors →
CVE-2023-31345 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading… 7.5 High CVE-2023-31343 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading… 7.5 High CVE-2023-31342 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading… 7.5 High CVE-2024-21925 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,… 8.2 High
Track this CVE