CVE-2023-31364

High

Published: 26/02/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest VM to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.

Risk Assessment

The risk is the possibility of a DoS attack on the host by a single VM, which could disrupt all other VMs and services running on that host.

Recommendation

It is recommended to immediately apply patches provided by the virtualization platform vendor and to limit trust in VMs, especially those from untrusted sources.

Other vulnerabilities in IOMMU

CVE-2024-21953Medium
The vulnerability in IOMMU stems from improper input validation, allowing a malicious hypervisor to reconfigure IOMMU registers. This results in loss of guest data integrity.

Original NVD description (English source)

Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.