← Database

CVE-2023-20591

MEDIUM CVSS: 6.5 Published: 2024-08-13 Modified: 2026-06-17

Description

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Affected Platforms

Amd Epyc 9754Amd Epyc 74F3Amd Epyc 9474FAmd Epyc 9634Amd Epyc 7303 FirmwareAmd Epyc 7303P FirmwareAmd Epyc 7313 FirmwareAmd Epyc 8434Pn FirmwareAmd Epyc 9384X FirmwareAmd Epyc 8534Pn Firmware

Weakness Type

CWE-665, CWE-665

References