Medium severityNVD Advisory· Published Apr 16, 2026· Updated Apr 17, 2026
CVE-2023-20585
CVE-2023-20585
Description
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.
Affected products
26- osv-coords26 versionspkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2016.0pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-kvmsmall&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-kvmsmall&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-obs-qa&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-obs-qa&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
< 6.12.0-160000.34.1+ 25 more
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1.160000.2.15
- (no CPE)range: < 6.12.0-160000.34.1.160000.2.15
- (no CPE)range: < 6.12.0-160000.34.1.160000.2.15
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
- (no CPE)range: < 6.12.0-160000.34.1
Patches
Vulnerability mechanics
References
1News mentions
1- Patch Tuesday - April 2026Rapid7 Blog · Apr 14, 2026