CVE-2023-20585
LowSummary
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.
Risk Assessment
The risk involves potential breach of virtual machine isolation, which could lead to leakage or modification of confidential guest data, compromising the security of virtualized environments.
Recommendation
It is recommended to immediately apply patches provided by the platform vendor (e.g., AMD) and update the hypervisor software and IOMMU drivers to the latest versions.
Original NVD description (English source)
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.