cbcvebase.
CVE-2023-31364
published 2026-02-26

CVE-2023-31364: Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with…

PriorityP341high8.3CVSS 4.0
AVNACLATNPRLUINVCNVINVAHSCNSINSAHEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.25%
15.9th percentile
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.

Affected

23 ranges
VendorProductVersion rangeFixed in
amdamd_athlon_3000_series_mobile_processors_with_radeon_graphics——
amdamd_epyc_embedded_8004_series_processors——
amdamd_epyc_embedded_9004_series_processor——
amdamd_ryzen_3000_series_desktop_processors——
amdamd_ryzen_3000_series_mobile_processors_with_radeon_graphics——
amdamd_ryzen_4000_series_mobile_processors_with_radeon_graphics——
amdamd_ryzen_5000_series_mobile_processors_with_radeon_graphics——
amdamd_ryzen_6000_series_processors_with_radeon_graphics——
amdamd_ryzen_7000_series_desktop_processors——
amdamd_ryzen_7020_series_processors_with_radeon_graphics——
amdamd_ryzen_7040_series_mobile_processors_with_radeon_graphics——
amdamd_ryzen_7045_series_mobile_processors_with_radeon_graphics——
amdamd_ryzen_8000_series_desktop_processors——
amdamd_ryzen_embedded_5000_series_processors——
amdamd_ryzen_embedded_7000_series_processors——
amdamd_ryzen_embedded_8000_series_processors——
amdamd_ryzen_embedded_r1000_series_processors——
amdamd_ryzen_embedded_r2000_series_processors——
amdamd_ryzen_embedded_v1000_series_processors——
amdamd_ryzen_embedded_v2000_series_processors——
amdamd_ryzen_embedded_v3000_series_processors——
amdamd_ryzen_threadripper_pro_3000_wx-series_processors——
amdamd_ryzen_threadripper_pro_5000_wx-series_processors——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.