Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7001 Series

Default version status: affected

  • NaplesPI 1.0.0.Punaffected

AMD AMD EPYC™ 7002 Series

Default version status: affected

  • RomePI 1.0.0.Lunaffected

AMD AMD EPYC™ 7003 Series

Default version status: affected

  • MilanPI 1.0.0.Funaffected

AMD AMD EPYC™ 9004 Series

Default version status: affected

  • Genoa 1.0.0.Eunaffected

References