Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-20582 EUVD-2023-24761GHSA-7vx3-5mq4-mccg

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults…

Published Feb 11, 2025 · Updated Feb 12, 2025 · Assigned by AMD

Vendor: AMD Product: AMD EPYC™ 9004 Processors Product: AMD EPYC™ Embedded 9004

Description

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 9004 Processors — GenoaPI 1.0.0.C
AMD AMD EPYC™ Embedded 9004 — EmbGenoaPI-SP5 1.0.0.7

Advisories 1

References