CVE Catalog
CVE-2024-21953
MediumSummary
The vulnerability in IOMMU stems from improper input validation, allowing a malicious hypervisor to reconfigure IOMMU registers. This results in loss of guest data integrity.
Risk Assessment
The organization faces a risk of data integrity compromise in virtualized environments, where a malicious hypervisor can manipulate memory assigned to virtual machines.
Recommendation
It is recommended to immediately apply security patches provided by the virtualization platform vendor and monitor IOMMU configuration for unauthorized changes.
Original NVD description (English source)
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity.