vulnerability
Alma Linux: CVE-2023-20584: Important: linux-firmware security update (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:M/Au:M/C:N/I:C/A:N) | Aug 13, 2024 | Oct 7, 2024 | Apr 17, 2026 |
Severity
4
CVSS
(AV:L/AC:M/Au:M/C:N/I:C/A:N)
Published
Aug 13, 2024
Added
Oct 7, 2024
Modified
Apr 17, 2026
Description
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.
Solutions
alma-upgrade-iwl100-firmwarealma-upgrade-iwl1000-firmwarealma-upgrade-iwl105-firmwarealma-upgrade-iwl135-firmwarealma-upgrade-iwl2000-firmwarealma-upgrade-iwl2030-firmwarealma-upgrade-iwl3160-firmwarealma-upgrade-iwl3945-firmwarealma-upgrade-iwl4965-firmwarealma-upgrade-iwl5000-firmwarealma-upgrade-iwl5150-firmwarealma-upgrade-iwl6000-firmwarealma-upgrade-iwl6000g2a-firmwarealma-upgrade-iwl6000g2b-firmwarealma-upgrade-iwl6050-firmwarealma-upgrade-iwl7260-firmwarealma-upgrade-libertas-sd8686-firmwarealma-upgrade-libertas-sd8787-firmwarealma-upgrade-libertas-usb8388-firmwarealma-upgrade-libertas-usb8388-olpc-firmwarealma-upgrade-linux-firmwarealma-upgrade-linux-firmware-whencealma-upgrade-netronome-firmware
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.