AMD EPYC and EPYC Embedded Processors Reverse Map Table Initialization Vulnerability

A vulnerability exists in certain AMD EPYC and EPYC Embedded processors due to missing checks in functions related to the initialization of the reverse map table (RMP). This flaw can allow a local admin-privileged attacker to cause incorrect identification of I/O memory, potentially leading to a loss of integrity in guest memory. The issue is present in AMD EPYC 7003 Series Processors, AMD EPYC 9004 Series Processors, and AMD EPYC Embedded 7003 Series Processors.

Impact

Exploitation of this vulnerability can result in a loss of integrity for guest memory, allowing for unauthorized modifications or corruption of data.

Remediation

Users can update to the recommended AMD EPYC Platform Initialization (PI) or Secure Encrypted Virtualization (SEV) firmware versions. Specific update details can be found in the AMD Security Bulletin AMD-SB-3023.