CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent…

PriorityP411low3.3CVSS 3.1

AVLACLPRLUINSUCNILAN

EPSS

0.20%

10.4th percentile

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
amd	3rd_gen_amd_epyc_processors	—	—
amd	4th_gen_amd_epyc_processors	—	—
amd	genoapi_firmware	< 1.0.0.3	1.0.0.3
amd	milanpi_firmware	< 1.0.0.a	1.0.0.a

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.