medium5.3
CVE-2023-20584
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised…
Impact
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 8024pn Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8024p Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8124pn Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8124p Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8224pn Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8224p Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8324pn Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8324p Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8434pn Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8434p Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8534pn Firmware | before genoapi_1.0.0.b |
| Amd | Epyc 8534p Firmware | before genoapi_1.0.0.b |