AMD IOMMU can read past the device table, Xen says (CVE-2024-21963)
Original title: Xen Security Advisory 524 v1 (CVE-2024-21963) - AMD IOMMU Out-of-Bounds Device Table Read
The Xen excerpt says some AMD IOMMUs read beyond a device table whose size the OS or hypervisor chose.
The Xen security team published XSA-524 for CVE-2024-21963, an out-of-bounds device-table read in some AMD IOMMUs. The OS or hypervisor chooses the table position and size, which holds the main device configuration. AMD says certain IOMMUs can read past that size under specific circumstances. The excerpt does not list models, a fix, or exploitation.
Unconfirmed: The excerpt does not identify which IOMMUs are affected or whether a fix or attacks exist.
- The issue is CVE-2024-21963, published as Xen advisory XSA-524.
- The device table stores the main configuration information for devices.
- The posted text ends before scope, fixes, or exploitation status.
Impact: out-of-bounds read of IOMMU device-table memory
| Product | Affected |
|---|---|
| AMD IOMMU | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21963 | — | — | — |
From the original article
Posted by Xen . org security team on Nov 10 Xen Security Advisory CVE-2024-21963 / XSA-524 AMD IOMMU Out-of-Bounds Device Table Read ISSUE DESCRIPTION ================= With AMD IOMMUs, the OS or Hypervisor chooses the position and size of the Device Table, which holds the main configuration information for devices.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.