Medium severity6.5NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026
CVE-2023-20591
CVE-2023-20591
Description
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
Affected products
70- AMD/AMD EPYC™ 7003 Series Processorsv5Range: MilanPI 1.0.0.B
- AMD/AMD EPYC™ 9004 Series Processorsv5Range: Genoa 1.0.0.8
- AMD/AMD EPYC™ Embedded 7003 Series Processorsv5Range: EmbMilanPI-SP3 1.0.0.7
- AMD/AMD EPYC™ Embedded 9003 Series Processorsv5Range: EmbGenoaPI-SP5 1.0.0.3
Patches
Vulnerability mechanics
References
1- www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.