← Database

CVE-2023-20584

MEDIUM CVSS: 5.3 Published: 2024-08-13 Modified: 2026-06-17

Description

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

Affected Platforms

Amd Epyc 9754Amd Epyc 74F3Amd Epyc 9474FAmd Epyc 9634Amd Epyc 7303 FirmwareAmd Epyc 7303P FirmwareAmd Epyc 7313 FirmwareAmd Epyc 8434Pn FirmwareAmd Epyc 9384X FirmwareAmd Epyc 8534Pn Firmware

Weakness Type

NVD-CWE-noinfo

References