{"action":"Upgrade amd64-microcode to 3.20240820.1 or later.","affected":[{"fixed":"3.20240820.1","introduced":"0"}],"component":"amd64-microcode","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["3.20240820.1"],"id":"tcs_01M5NHVMCEG0DV4ZK469NA3A7F","modified_at":"2026-10-26T18:00:26.353048175Z","published_at":"2024-08-13T17:15:19.713Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-20584","https://security-tracker.debian.org/tracker/CVE-2023-20584"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-20584#Debian:13/amd64-microcode","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-20584"}],"summary":"IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypas"}