p PatchFirst

CVE-2023-20584

CVE-2023-20584

This page contains facts from public vulnerability sources. Check the original advisory before updating.

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

CVSS 5.3 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • amd epyc™ 7003 processors

    Versions
    • MilanPI 1.0.0.C: Not affected (PI)

    No fix published

  • amd epyc™ 9004 processors

    Versions
    • GenoaPI 1.0.0.B: Not affected

    No fix published

  • amd64-microcode Debian:12

    Versions
    • 0.20120117-1
    • 1.20120117-1
    • 1.20120117-2
    • 1.20120117-2~bpo60+1
    • 1.20120910-1
    • 1.20120910-1~bpo60+1
    • 1.20120910-2
    • 1.20120910-2~bpo60+1
    • 1.20120910-3
    • 1.20141028.1
    • 1.20160316.1
    • 2.20120910-1
    • 2.20120910-1~bpo70+1
    • 2.20131007.1
    • 2.20131007.1+really20130710.1
    • 2.20141028.1
    • 2.20141028.1~bpo70+1
    • 2.20160316.1
    • 2.20160316.1~bpo70+1
    • 2.20160316.1~deb8u1
    • 3.20160316.1
    • 3.20160316.2
    • 3.20160316.3
    • 3.20171205.1
    • 3.20171205.2
    • 3.20180515.1
    • 3.20180524.1
    • 3.20180524.1~bpo9+1
    • 3.20181128.1
    • 3.20181128.1~bpo9+1
    • 3.20181128.1~deb8u1
    • 3.20181128.1~deb9u1
    • 3.20181128.1~deb9u2
    • 3.20191021.1
    • 3.20191218.1
    • 3.20220411.1
    • 3.20220411.2
    • 3.20230414.1
    • 3.20230719.1
    • 3.20230719.1~deb10u1
    • 3.20230719.1~deb11u1
    • 3.20230719.1~deb12u1
    • 3.20230808.1
    • 3.20230808.1.1
    • 3.20230808.1.1~deb11u1
    • 3.20230808.1.1~deb12u1
    • 3.20230823.1
    • 3.20231019.1
    • 3.20240116.2
    • 3.20240116.2+nmu1
    • 3.20240710.1
    • 3.20240710.2
    • 3.20240710.2~deb11u1
    • 3.20240710.2~deb12u1
    • 3.20240820.1~deb11u1
    Affected ranges
    • ECOSYSTEM: < 3.20240820.1~deb12u1

    Update to 3.20240820.1~deb12u1

  • amd64-microcode Debian:13

    Versions
    • 0.20120117-1
    • 1.20120117-1
    • 1.20120117-2
    • 1.20120117-2~bpo60+1
    • 1.20120910-1
    • 1.20120910-1~bpo60+1
    • 1.20120910-2
    • 1.20120910-2~bpo60+1
    • 1.20120910-3
    • 1.20141028.1
    • 1.20160316.1
    • 2.20120910-1
    • 2.20120910-1~bpo70+1
    • 2.20131007.1
    • 2.20131007.1+really20130710.1
    • 2.20141028.1
    • 2.20141028.1~bpo70+1
    • 2.20160316.1
    • 2.20160316.1~bpo70+1
    • 2.20160316.1~deb8u1
    • 3.20160316.1
    • 3.20160316.2
    • 3.20160316.3
    • 3.20171205.1
    • 3.20171205.2
    • 3.20180515.1
    • 3.20180524.1
    • 3.20180524.1~bpo9+1
    • 3.20181128.1
    • 3.20181128.1~bpo9+1
    • 3.20181128.1~deb8u1
    • 3.20181128.1~deb9u1
    • 3.20181128.1~deb9u2
    • 3.20191021.1
    • 3.20191218.1
    • 3.20220411.1
    • 3.20220411.2
    • 3.20230414.1
    • 3.20230719.1
    • 3.20230719.1~deb10u1
    • 3.20230719.1~deb11u1
    • 3.20230719.1~deb12u1
    • 3.20230808.1
    • 3.20230808.1.1
    • 3.20230808.1.1~deb11u1
    • 3.20230808.1.1~deb12u1
    • 3.20230823.1
    • 3.20231019.1
    • 3.20240116.2
    • 3.20240116.2+nmu1
    • 3.20240710.1
    • 3.20240710.2
    • 3.20240710.2~deb11u1
    • 3.20240710.2~deb12u1
    • 3.20240820.1~deb11u1
    • 3.20240820.1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 3.20240820.1

    Update to 3.20240820.1

  • amd64-microcode Debian:14

    Versions
    • 0.20120117-1
    • 1.20120117-1
    • 1.20120117-2
    • 1.20120117-2~bpo60+1
    • 1.20120910-1
    • 1.20120910-1~bpo60+1
    • 1.20120910-2
    • 1.20120910-2~bpo60+1
    • 1.20120910-3
    • 1.20141028.1
    • 1.20160316.1
    • 2.20120910-1
    • 2.20120910-1~bpo70+1
    • 2.20131007.1
    • 2.20131007.1+really20130710.1
    • 2.20141028.1
    • 2.20141028.1~bpo70+1
    • 2.20160316.1
    • 2.20160316.1~bpo70+1
    • 2.20160316.1~deb8u1
    • 3.20160316.1
    • 3.20160316.2
    • 3.20160316.3
    • 3.20171205.1
    • 3.20171205.2
    • 3.20180515.1
    • 3.20180524.1
    • 3.20180524.1~bpo9+1
    • 3.20181128.1
    • 3.20181128.1~bpo9+1
    • 3.20181128.1~deb8u1
    • 3.20181128.1~deb9u1
    • 3.20181128.1~deb9u2
    • 3.20191021.1
    • 3.20191218.1
    • 3.20220411.1
    • 3.20220411.2
    • 3.20230414.1
    • 3.20230719.1
    • 3.20230719.1~deb10u1
    • 3.20230719.1~deb11u1
    • 3.20230719.1~deb12u1
    • 3.20230808.1
    • 3.20230808.1.1
    • 3.20230808.1.1~deb11u1
    • 3.20230808.1.1~deb12u1
    • 3.20230823.1
    • 3.20231019.1
    • 3.20240116.2
    • 3.20240116.2+nmu1
    • 3.20240710.1
    • 3.20240710.2
    • 3.20240710.2~deb11u1
    • 3.20240710.2~deb12u1
    • 3.20240820.1~deb11u1
    • 3.20240820.1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 3.20240820.1

    Update to 3.20240820.1

  • amd64-microcode Ubuntu:24.04:LTS

    Versions
    • 3.20230808.1.1ubuntu1
    • 3.20231019.1ubuntu1
    • 3.20231019.1ubuntu2
    • 3.20231019.1ubuntu2.1
    Affected ranges
    • ECOSYSTEM: < 3.20250311.1ubuntu0.24.04.1

    Update to 3.20250311.1ubuntu0.24.04.1

Original sources

Check your server →