CVE-2023-20584

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

• amd epyc 8024pn firmware (< genoapi 1.0.0.b) • amd epyc 8024p firmware (< genoapi 1.0.0.b) • amd epyc 8124pn firmware (< genoapi 1.0.0.b) • amd epyc 8124p firmware (< genoapi 1.0.0.b) • amd epyc 8224pn firmware (< genoapi 1.0.0.b) • amd epyc 8224p firmware (< genoapi 1.0.0.b) • amd epyc 8324pn firmware (< genoapi 1.0.0.b) • amd epyc 8324p firmware (< genoapi 1.0.0.b) • amd epyc 8434pn firmware (< genoapi 1.0.0.b) • amd epyc 8434p firmware (< genoapi 1.0.0.b) • amd epyc 8534pn firmware (< genoapi 1.0.0.b) • amd epyc 8534p firmware (< genoapi 1.0.0.b) • amd epyc 9734 firmware (< genoapi 1.0.0.b) • amd epyc 9754s firmware (< genoapi 1.0.0.b) • amd epyc 9754 firmware (< genoapi 1.0.0.b) • amd epyc 9184x firmware (< genoapi 1.0.0.b) • amd epyc 9384x firmware (< genoapi 1.0.0.b) • amd epyc 9684x firmware (< genoapi 1.0.0.b) • amd epyc 9124 firmware (< genoapi 1.0.0.b) • amd epyc 9174f firmware (< genoapi 1.0.0.b) • amd epyc 9224 firmware (< genoapi 1.0.0.b) • amd epyc 9254 firmware (< genoapi 1.0.0.b) • amd epyc 9274f firmware (< genoapi 1.0.0.b) • amd epyc 9334 firmware (< genoapi 1.0.0.b) • amd epyc 9354 firmware (< genoapi 1.0.0.b) • amd epyc 9354p firmware (< genoapi 1.0.0.b) • amd epyc 9374f firmware (< genoapi 1.0.0.b) • amd epyc 9454 firmware (< genoapi 1.0.0.b) • amd epyc 9454p firmware (< genoapi 1.0.0.b) • amd epyc 9474f firmware (< genoapi 1.0.0.b) • amd epyc 9534 firmware (< genoapi 1.0.0.b) • amd epyc 9554 firmware (< genoapi 1.0.0.b) • amd epyc 9554p firmware (< genoapi 1.0.0.b) • amd epyc 9634 firmware (< genoapi 1.0.0.b) • amd epyc 9654 firmware (< genoapi 1.0.0.b) • amd epyc 9654p firmware (< genoapi 1.0.0.b) • amd epyc 7203 firmware (< milanpi 1.0.0.b) • amd epyc 7203p firmware (< milanpi 1.0.0.b) • amd epyc 72f3 firmware (< milanpi 1.0.0.b) • amd epyc 7303 firmware (< milanpi 1.0.0.b) • amd epyc 7303p firmware (< milanpi 1.0.0.b) • amd epyc 7313 firmware (< milanpi 1.0.0.b) • amd epyc 7313p firmware (< milanpi 1.0.0.b) • amd epyc 7343 firmware (< milanpi 1.0.0.b) • amd epyc 73f3 firmware (< milanpi 1.0.0.b) • amd epyc 7373x firmware (< milanpi 1.0.0.b) • amd epyc 7413 firmware (< milanpi 1.0.0.b) • amd epyc 7443 firmware (< milanpi 1.0.0.b) • amd epyc 7443p firmware (< milanpi 1.0.0.b) • amd epyc 74f3 firmware (< milanpi 1.0.0.b) • amd epyc 7453 firmware (< milanpi 1.0.0.b) • amd epyc 7473x firmware (< milanpi 1.0.0.b) • amd epyc 7513 firmware (< milanpi 1.0.0.b) • amd epyc 7543 firmware (< milanpi 1.0.0.b) • amd epyc 7543p firmware (< milanpi 1.0.0.b) • amd epyc 75f3 firmware (< milanpi 1.0.0.b) • amd epyc 7573x firmware (< milanpi 1.0.0.b) • amd epyc 7643 firmware (< milanpi 1.0.0.b) • amd epyc 7773x firmware (< milanpi 1.0.0.b) • amd epyc 7643p firmware (< milanpi 1.0.0.b) … and 5 more