CVE-2023-34326

Summary

CVE-2023-34326 is a vulnerability affecting some AMD processors. The issue stems from incorrect caching invalidation guidelines in the AMD-Vi specification (Rev. 3.07-PUB, Oct 2022). This misconfiguration can lead to devices malfunctioning due to stale DMA mappings. Consequently, unintended memory regions may become accessible, posing a potential security risk. The vulnerability arises when the IOMMU TLB is not properly flushed upon updating specific fields of the Device Tree Entry (DTE).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.