CVE-2023-20591

State: Published
Severity: 6.5 Medium
Published: Aug 13, 2024
Updated: Mar 13, 2025
Reserved: Oct 27, 2022

Description

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L	AMD

Weaknesses

CWE-665 Improper Initialization

Affected Products

Product	Versions
AMD EPYC™ 7003 Series ProcessorsAMD	MilanPI 1.0.0.BNot affected
AMD EPYC™ 9004 Series ProcessorsAMD	Genoa 1.0.0.8Not affected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD	EmbMilanPI-SP3 1.0.0.7Not affected
AMD EPYC™ Embedded 9003 Series ProcessorsAMD	EmbGenoaPI-SP5 1.0.0.3Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.