Out-of-Bounds Read Vulnerability in AMD Hypervisor
CVE-2024-21963

6MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 7003 Series Processors
Amd Epyc™ 7002 Series Processors
Amd Epyc™ 9004 Series Processors
Amd Epyc™ 7001 Series Processors
Vendor
CVE Published:
12 November 2026

What is CVE-2024-21963?

An out-of-bounds read vulnerability in the I/O Memory Management Unit (IOMMU) of AMD's hypervisor could enable a malicious guest to manipulate hypervisor memory pages. This may lead to a potential crash of the host system, resulting in significant downtime and loss of availability. Organizations relying on AMD hypervisors should implement measures to safeguard against this vulnerability to maintain service continuity.

Affected Version(s)

AMD EPYC™ 4004 Series Processors ComboAM5PI 1.2.0.3g

AMD EPYC™ 4005 Series Processors ComboAM5PI 1.2.0.3g

AMD EPYC™ 7001 Series Processors Linux kernel upstream

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.