CVE-2023-31364 | THREATINT

Description

Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.

PUBLISHED Reserved 2023-04-27 | Published 2026-02-26 | Updated 2026-02-26 | Assigner AMD

HIGH: 8.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Problem types

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Product status

Default status

affected

NaplesPI 1.0.0.R

unaffected

Default status

affected

RomePI 1.0.0.N

unaffected

Default status

affected

MilanPI 1.0.0.H

unaffected

Default status

affected

GenoaPI 1.0.0.G

unaffected

Default status

affected

GenoaPI 1.0.0.G

unaffected

Default status

affected

TurinPI 1.0.0.7

unaffected

Default status

affected

SnowyOwl_SP4_SP4r2.1.1.0.H

unaffected

Default status

affected

EmbRomePI-SP3 1.0.0.F

unaffected

Default status

affected

EmbMilanPI-SP3 v9 1.0.0.C

unaffected

Default status

unaffected

EmbGenoaPI-SP5 1.0.0.B

affected

Default status

unaffected

EmbGenoaPI-SP5 1.0.0.B

affected

Default status

affected

EmbTurinPI-SP5 1.0.0.1

unaffected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

Default status

affected

No Fix Planned

affected

References

www.amd.com/...es/product-security/bulletin/amd-sb-7059.html

cve.org (CVE-2023-31364)

nvd.nist.gov (CVE-2023-31364)

Download JSON