CVE-2023-20585
Fixed in a distro release EPSS <1%CVSS 5.6
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.
Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise High Availability Extension 15 SP7 | kernel-default | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise High Availability Extension 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise High Availability Extension 16.0 | kernel-default | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_18 | 1-150700.1.5.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_15 | 1-150700.15.3.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_19 | 1-150700.15.3.4 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-64kb | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-64kb | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default-base | 6.4.0-150700.53.73.2.150700.17.41.4 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default-base | 6.4.0-150700.53.55.1.150700.17.33.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-source | 6.4.0-150700.53.73.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-source | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-zfcpdump | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-zfcpdump | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-docs | 6.4.0-150700.53.73.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-docs | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-obs-build | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-obs-build | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-source | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-source | 6.4.0-150700.53.73.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-syms | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-syms | 6.4.0-150700.53.73.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | kernel-default | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-azure | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-azure | 6.4.0-150700.53.73.2 |
| SUSE Linux Enterprise Server 16.0 | kernel-64kb | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-azure | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-default | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-default-base | 6.12.0-160000.34.1.160000.2.15 |
| SUSE Linux Enterprise Server 16.0 | kernel-docs | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-kvmsmall | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-obs-qa | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-source | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-syms | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-zfcpdump | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-64kb | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-azure | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-default | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-default-base | 6.12.0-160000.34.1.160000.2.15 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-docs | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-kvmsmall | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-obs-qa | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-source | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-syms | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-zfcpdump | 6.12.0-160000.34.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | kernel-default | 6.4.0-150700.53.73.2 |
| SUSE Linux Micro 6.0 | kernel-default | 6.4.0-50.1 |
| SUSE Linux Micro 6.0 | kernel-kvmsmall | 6.4.0-50.1 |
| SUSE Linux Micro 6.0 | kernel-rt | 6.4.0-50.1 |
| SUSE Linux Micro 6.0 | kernel-source | 6.4.0-50.2 |
| SUSE Linux Micro 6.0 | kernel-source-rt | 6.4.0-50.2 |
| SUSE Linux Micro 6.1 | kernel-default | 6.4.0-50.1 |
| SUSE Linux Micro 6.1 | kernel-kvmsmall | 6.4.0-50.1 |
| SUSE Linux Micro 6.1 | kernel-rt | 6.4.0-50.1 |
| SUSE Linux Micro 6.1 | kernel-source | 6.4.0-50.2 |
| SUSE Linux Micro 6.1 | kernel-source-rt | 6.4.0-50.2 |
| SUSE Linux Micro 6.2 | kernel-64kb | 6.12.0-160000.34.1 |
| SUSE Linux Micro 6.2 | kernel-default | 6.12.0-160000.34.1 |
| SUSE Linux Micro 6.2 | kernel-default-base | 6.12.0-160000.34.1.160000.2.15 |
| SUSE Linux Micro 6.2 | kernel-rt | 6.12.0-160000.34.1 |
| SUSE Linux Micro 6.2 | kernel-source | 6.12.0-160000.34.1 |
| SUSE Linux Micro Extras 6.2 | kernel-obs-build | 6.12.0-160000.34.1 |
| SUSE Linux Micro Extras 6.2 | kernel-syms | 6.12.0-160000.34.1 |
| SUSE Real Time Module 15 SP7 | kernel-rt | 6.4.0-150700.7.67.1 |
| SUSE Real Time Module 15 SP7 | kernel-source-rt | 6.4.0-150700.7.67.1 |
| SUSE Real Time Module 15 SP7 | kernel-syms-rt | 6.4.0-150700.7.67.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gke-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-intel-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.10 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.14 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-azure-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-oem-5.17 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.0 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.1 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-riscv-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | no fix |
| Ubuntu 24.04 LTS | amd64-microcode | no fix |
| Ubuntu 24.04 LTS | linux | 6.8.0-147.147 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1067.70 |
| Ubuntu 24.04 LTS | linux-aws-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-aws-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-aws-7.0 | 7.0.0-1014.14~24.04.1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1071.79 |
| Ubuntu 24.04 LTS | linux-azure-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-7.0 | 7.0.0-1017.17~24.04.1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1069.76 |
| Ubuntu 24.04 LTS | linux-azure-fde-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1016.16~24.04.1 |
| Ubuntu 24.04 LTS | linux-azure-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1071.79 |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-7.0 | 7.0.0-1014.14~24.04.1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1066.74 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1052.56 |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-38.38~24.04.4 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1067.68 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-147.147.1 |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.8 | no fix |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1064.67 |
| Ubuntu 24.04 LTS | linux-oracle-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-oracle-7.0 | 7.0.0-1013.13~24.04.1 |
| Ubuntu 24.04 LTS | linux-raspi | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu 24.04 LTS | linux-realtime | no fix |
| Ubuntu 24.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-38.38.1~24.04.1 |
| Ubuntu 24.04 LTS | linux-xilinx | no fix |
| Ubuntu 25.10 | amd64-microcode | no fix |
| Ubuntu 25.10 | linux | no fix |
| Ubuntu 25.10 | linux-aws | no fix |
| Ubuntu 25.10 | linux-azure | no fix |
| Ubuntu 25.10 | linux-azure-fde | no fix |
| Ubuntu 25.10 | linux-gcp | no fix |
| Ubuntu 25.10 | linux-oracle | no fix |
| Ubuntu 25.10 | linux-raspi | no fix |
| Ubuntu 25.10 | linux-realtime | no fix |
| Ubuntu 25.10 | linux-riscv | no fix |
| Ubuntu 26.04 LTS | amd64-microcode | no fix |
| Ubuntu 26.04 LTS | linux | 7.0.0-38.38 |
| Ubuntu 26.04 LTS | linux-aws | 7.0.0-1014.14 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1017.17 |
| Ubuntu 26.04 LTS | linux-azure-fde | 7.0.0-1016.16 |
| Ubuntu 26.04 LTS | linux-gcp | 7.0.0-1014.14 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1008.9 |
| Ubuntu 26.04 LTS | linux-ibm | 7.0.0-1015.15 |
| Ubuntu 26.04 LTS | linux-nvidia | no fix |
| Ubuntu 26.04 LTS | linux-nvidia-bos | no fix |
| Ubuntu 26.04 LTS | linux-oem-7.0 | 7.0.0-1015.15 |
| Ubuntu 26.04 LTS | linux-oracle | 7.0.0-1013.13 |
| Ubuntu 26.04 LTS | linux-raspi | no fix |
| Ubuntu 26.04 LTS | linux-realtime | 7.0.0-38.38.1 |
| Ubuntu 26.04 LTS | linux-riscv | 7.0.0-38.38.1 |
| Ubuntu 26.10 | amd64-microcode | no fix |
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1033.38 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1067.70+fips1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1071.79+fips1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-147.147+fips1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1071.79+fips1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1062.63 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | no fix |