Is there a patch available for CVE-2023-20585?

Yes, a patch is available for CVE-2023-20585. Update the affected software to the latest version immediately.

Suse CVE-2023-20585

Q: What is the CVSS score of CVE-2023-20585?

CVE-2023-20585 has a CVSS 4.0 base score of 5.6 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2023-24764 MEDIUM

Access of Memory Location After End of Buffer (CWE-788)

2026-04-16 AMD

GHSA-c43c-pr38-m5g2

Information Disclosure Suse

5.6

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.6 MEDIUM

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

SUSE

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Apr 20, 2026 - 08:30 nvd

Patch available

CVSS changed

Apr 16, 2026 - 19:22 NVD

5.6 (MEDIUM)

EUVD ID Assigned

Apr 16, 2026 - 19:15 euvd

EUVD-2023-24764

CVE Published

Apr 16, 2026 - 18:42 nvd

MEDIUM 5.6

DescriptionCVE.org

Insuffient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised HV to trigger an out of bounds condition without RMP checks resulting in a potential loss of confidential guest integrity.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-788. Insuffient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised HV to trigger an out of bounds condition without RMP checks resulting in a potential loss of confidential guest integrity. Affected products include: Amd Amd Epyc™ 7003 Series Processors, Amd Amd Epyc™ 9004 Series Processors, Amd Amd Epyc™ Embedded 7003 Series Processors, Amd Amd Epyc™ Embedded 9004 Series Processors.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Same weakness CWE-788 – Access of Memory Location After End of Buffer

View all

CVE-2021-32629 HIGH POC

8.8

CVE-2022-1451 HIGH POC

7.1

CVE-2021-27384 CRITICAL

9.8

CVE-2019-8280 CRITICAL

9.8

CVE-2019-8266 CRITICAL

9.8

CVE-2019-8265 CRITICAL

9.8

CVE-2019-8264 CRITICAL

9.8

CVE-2021-21105 HIGH

8.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7	Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed

CVE-2023-20585 vulnerability details – vuln.today

Back

Suse CVE-2023-20585

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-788 – Access of Memory Location After End of Buffer

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code