VULNERABILITY INTELLIGENCE

CVE-2023-20585

EPSS probability0.10%
CISA KEVNot currently listed
Published2026-04-16
Last modified2026-10-28

Description

Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.

Weakness classification

  • psirt@amd.com: CWE-788

Primary references