CVE-2023-20585
kernel-core: hw: amd: AMD-SN-3016: IOMMU Write Buffer Vulnerability
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 14, 2026
Updated · October 29, 2026
Description
A flaw was found in hw. Insufficient checks of the RMP on host buffer access in the Input-Output Memory Management Unit (IOMMU) allows an attacker with privileges and a compromised hypervisor to trigger an out-of-bounds condition without RMP checks. This issue results in the potential loss of guest integrity.
Statement
Red Hat has stack protection mechanisms in place, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.3CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
CWE-787 · Out-of-bounds Write