IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libertas-usb8388-firmwareUpgrade linux-firmware-whenceUpgrade linux-firmwareUpgrade iwl3160-firmwareUpgrade iwl2030-firmwareUpgrade iwl105-firmwareUpgrade iwl5150-firmwareUpgrade iwl3945-firmwareUpgrade iwl100-firmwareUpgrade iwl6000-firmwareUpgrade iwl1000-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl6050-firmwareUpgrade iwl6000g2b-firmwareUpgrade netronome-firmwareUpgrade iwl4965-firmwareUpgrade iwl7260-firmwareUpgrade iwl135-firmwareUpgrade iwl5000-firmwareUpgrade iwl6000g2a-firmwareUpgrade libertas-sd8686-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl2000-firmware | Oct 7, 2024 | Aug 13, 2024 |
| Debian | — | Upgrade amd64-microcode | Sep 2, 2024 | Aug 13, 2024 |
| Dell Poweredge Dsa2024350 | — | Upgrade Dell PowerEdge to the latest version | Jan 12, 2026 | Aug 13, 2024 |
| Oracle_linux | — | Upgrade iwl5000-firmwareUpgrade linux-firmware-whenceUpgrade iwl1000-firmwareUpgrade iwl2030-firmwareUpgrade iwl100-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl135-firmwareUpgrade linux-firmware-coreUpgrade netronome-firmwareUpgrade linux-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwl2000-firmwareUpgrade iwl5150-firmwareUpgrade iwl6000-firmwareUpgrade iwlax2xx-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl7260-firmwareUpgrade iwl105-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl6050-firmwareUpgrade liquidio-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl4965-firmwareUpgrade iwl3945-firmwareUpgrade iwl3160-firmware | Nov 11, 2024 | Aug 13, 2024 |
| Redhat_linux | — | Upgrade iwl2000-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl3945-firmwareUpgrade libertas-sd8787-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl4965-firmwareUpgrade iwl3160-firmwareUpgrade iwl5000-firmwareUpgrade iwl105-firmwareUpgrade iwl135-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl6050-firmwareUpgrade linux-firmwareUpgrade libertas-usb8388-firmwareUpgrade netronome-firmwareUpgrade iwl100-firmwareUpgrade iwl2030-firmwareUpgrade iwl7260-firmwareUpgrade iwl1000-firmwareUpgrade linux-firmware-whenceUpgrade iwl5150-firmwareUpgrade iwl6000-firmwareUpgrade iwl6000g2a-firmware | Oct 7, 2024 | Aug 13, 2024 |
| Ubuntu | — | Upgrade amd64-microcode | Jun 10, 2025 | Aug 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub