Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2024-21980

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiali

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD 3rd Gen AMD EPYC™ Processors

Default version status: affected

  • various to < MilanPI 1.0.0.Daffected

AMD 4th Gen AMD EPYC™ Processors

Default version status: affected

  • various to < GenoaPI 1.0.0.Caffected

AMD AMD EPYC™ Embedded 7003

Default version status: affected

  • various to < EmbMilanPI-SP3 1.0.0.9affected

AMD AMD EPYC™ Embedded 9003

Default version status: affected

  • various to < EmbGenoaPI-SP5 1.0.0.7affected

References