What’s Vulnerable › Vulnerabilities

CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-05 · updated 2026-06-17
• Weakness: CWE-672

Description

The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed. Such stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.

Affected products

• xen: all versions

References

• https://xenbits.xenproject.org/xsa/advisory-442.html
• http://xenbits.xen.org/xsa/advisory-442.html
• https://xenbits.xenproject.org/xsa/advisory-442.html

Get alerted when CVE-2023-34326 or the next vulnerability affects your stack