NetSight
medium6.5

CVE-2023-20591

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hyp…

Impact

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Affected products

VendorProductAffected versions
AmdEpyc 8024pn Firmware
before genoapi_1.0.0.8
AmdEpyc 8024p Firmware
before genoapi_1.0.0.8
AmdEpyc 8124pn Firmware
before genoapi_1.0.0.8
AmdEpyc 8124p Firmware
before genoapi_1.0.0.8
AmdEpyc 8224pn Firmware
before genoapi_1.0.0.8
AmdEpyc 8224p Firmware
before genoapi_1.0.0.8
AmdEpyc 8324pn Firmware
before genoapi_1.0.0.8
AmdEpyc 8324p Firmware
before genoapi_1.0.0.8
AmdEpyc 8434pn Firmware
before genoapi_1.0.0.8
AmdEpyc 8434p Firmware
before genoapi_1.0.0.8
AmdEpyc 8534pn Firmware
before genoapi_1.0.0.8
AmdEpyc 8534p Firmware
before genoapi_1.0.0.8

Weakness classification

References