CVE-2024-21978 — AMD / 3rd Gen AMD EPYC™ Processors

CVE-2024-21978

AMD / 3rd Gen AMD EPYC™ Processors PUBLISHED

Description (CNA)

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

Affected (CNA)

Vendor / product	Versions
AMD / 3rd Gen AMD EPYC™ Processors	affected various before MilanPI 1.0.0.D
AMD / 4th Gen AMD EPYC™ Processors	affected various before GenoaPI 1.0.0.C
AMD / AMD EPYC™ Embedded 7003	affected various before EmbMilanPI-SP3 1.0.0.9
AMD / AMD EPYC™ Embedded 9003	affected various before EmbGenoaPI-SP5 1.0.0.7

CWE

CWE-20

References

https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.