CVE Database›CVE-2023-20585

CVE-2023-20585

kernel-core: hw: amd: AMD-SN-3016: IOMMU Write Buffer Vulnerability

Loading…

Severity

Moderate

Red Hat Product Security

5.3

CVSS 3.1

Review impact separately from score.

Published · April 14, 2026

Updated · October 29, 2026

Description

A flaw was found in hw. Insufficient checks of the RMP on host buffer access in the Input-Output Memory Management Unit (IOMMU) allows an attacker with privileges and a compromised hypervisor to trigger an out-of-bounds condition without RMP checks. This issue results in the potential loss of guest integrity.

Statement

Red Hat has stack protection mechanisms in place, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.3
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

CWE-787 · Out-of-bounds Write