CVE-2024-21980 — AMD / 3rd Gen AMD EPYC™ Processors

CVE-2024-21980

AMD / 3rd Gen AMD EPYC™ Processors PUBLISHED

Description (CNA)

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
AMD / 3rd Gen AMD EPYC™ Processors	affected various before MilanPI 1.0.0.D
AMD / 4th Gen AMD EPYC™ Processors	affected various before GenoaPI 1.0.0.C
AMD / AMD EPYC™ Embedded 7003	affected various before EmbMilanPI-SP3 1.0.0.9
AMD / AMD EPYC™ Embedded 9003	affected various before EmbGenoaPI-SP5 1.0.0.7

CWE

CWE-119

References

https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.