Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-31351 EUVD-2023-35662GHSA-x676-jq8m-r576

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of inte…

Published Sep 6, 2025 · Updated Sep 8, 2025 · Assigned by AMD

Vendor: AMD Product: AMD EPYC™ 7003 Series Processors Product: AMD EPYC™ 8004 Series Processors Product: AMD EPYC™ 9004 Series Processors Product: AMD EPYC™ Embedded 7003 Series Processors Product: AMD EPYC™ Embedded 9004 Series Processors

Description

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 7003 Series Processors — Milan 100C
AMD AMD EPYC™ 9004 Series Processors — Genoa 100C
AMD AMD EPYC™ 8004 Series Processors — Genoa 100C
AMD AMD EPYC™ Embedded 7003 Series Processors — EmbMilanPI-SP3 1.0.0.9
AMD AMD EPYC™ Embedded 9004 Series Processors — EmbGenoaPI-SP5 1.0.0.7

Advisories 1

References