IOMMU improperly handles certain special address ranges with invalid device table entries…
Priority LOW 26Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00187 8th percentileScored 2026-11-07
Fix Fixed AMD EPYC™ 7003 Processors (AMD): MilanPI 1.0.0.CAMD EPYC™ 9004 Processors (AMD): GenoaPI 1.0.0.BRed Hat: 4 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD EPYC™ 7003 Processors | — | MilanPI 1.0.0.C | Patch available | CNA |
| AMD | AMD EPYC™ 9004 Processors | — | GenoaPI 1.0.0.B | Patch available | CNA |
- AMD EPYC™ 7003 Processors VendorAMD Affected — Fixed in MilanPI 1.0.0.C Patch available CNA
- AMD EPYC™ 9004 Processors VendorAMD Affected — Fixed in GenoaPI 1.0.0.B Patch available CNA
CPE configurations NVD · 130
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8024pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8024p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8124pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8124p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8224pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8024pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8024p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8124pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8124p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8224pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 120 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8224p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8324pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8324p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8434pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8434p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8534pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8534p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8224p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8324pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8324p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8434pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8434p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8534pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8534p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
- Fix · CNA AMD EPYC™ 7003 Processors (AMD) Fixed in MilanPI 1.0.0.C
- Fix · CNA AMD EPYC™ 9004 Processors (AMD) Fixed in GenoaPI 1.0.0.B
Red Hat 4 advisories
- RHSA-2024:7484 Released 2024-10-02 · Red Hat rating Moderatelinux-firmware security update
- Red Hat Enterprise Linux BaseOS (v. 9) iwl100-firmware-39.31.5.1-143.3.el9_4, iwl1000-firmware-1:39.31.5.1-143.3.el9_4, iwl105-firmware-18.168.6.1-143.3.el9_4 +14
- RHSA-2024:7481 Released 2024-10-02 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware-39.31.5.1-124.el8_10.1, iwl1000-firmware-1:39.31.5.1-124.el8_10.1, iwl105-firmware-18.168.6.1-124.el8_10.1 +18
- RHSA-2024:7483 Released 2024-10-02 · Red Hat rating Lowlinux-firmware security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) iwl100-firmware-39.31.5.1-138.3.el9_2, iwl1000-firmware-1:39.31.5.1-138.3.el9_2, iwl105-firmware-18.168.6.1-138.3.el9_2 +14
Show 1 more Red Hat advisories
- RHSA-2024:7418 Released 2024-10-01 · Red Hat rating Moderatelinux-firmware security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) iwl100-firmware-39.31.5.1-114.3.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.3.el8_6.1, iwl105-firmware-18.168.6.1-114.3.el8_6.1 +18
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) iwl100-firmware-39.31.5.1-114.3.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.3.el8_6.1, iwl105-firmware-18.168.6.1-114.3.el8_6.1 +18
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) iwl100-firmware-39.31.5.1-114.3.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.3.el8_6.1, iwl105-firmware-18.168.6.1-114.3.el8_6.1 +18
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors — amd.com/en/resources/product-security/bulletin/amd-sb-3003.…
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2023-07029 Time-of-check time-of-use race condition in AMD EPYC™ 7001 ProcessorsPriority LOW 34
- TI-2021-21465 Buffer overflow in AMD EPYC™ 7001 ProcessorsPriority LOW 23
- TI-2023-15013 Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to…Priority LOW 20
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2024:7481 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2024:7484 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2024:7418 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.6) | Fixed | RHSA-2024:7418 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | RHSA-2024:7483 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.6) | Fixed | RHSA-2024:7418 |
Not affected: 3 products
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20584
- 2026-10-03 Alias added: GHSA-7cfh-j5pv-fw3c
References
More AMD Epyc 7203 Firmware vulnerabilities
- TI-2023-07040 Improper re-initialization of IOMMU during the DRTM event may permit an untrusted… CVSS 3.1CRITICAL 10.0
- TI-2024-14612 Memory corruption in AMD 3rd Gen AMD EPYC™ Processors CVSS 3.1HIGH 7.9
- TI-2024-14610 Improper input validation in AMD 3rd Gen AMD EPYC™ Processors CVSS 3.1HIGH 7.9
- TI-2021-08171 Out-of-bounds write in AMD EPYC™ 7001 Series Processors CVSS 3.1HIGH 8.2
- TI-2023-07029 Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors CVSS 3.1HIGH 7.5
- TI-2023-07018 Improper address validation in ASP with SNP enabled may potentially allow an attacker to… CVSS 3.1HIGH 7.5
Sources
- CVE-2023-20584 · CVE Program
- CVE-2023-20584 · NVD
- FIRST EPSS
- GHSA-7cfh-j5pv-fw3c · GitHub Advisory Database · CC BY 4.0
- CVE-2023-20584 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences