Skip to main content

Amd Epyc 7003 Series Processors CVE-2024-21944

| EUVDEUVD-2024-55617 MEDIUM
Improper Input Validation (CWE-20)
2026-06-10 AMD GHSA-4c4q-g449-2566
Information Disclosure Amd Amd Epyc 7003 Series Processors Amd Epyc 9004 Series Processor
5.3
CVSS 3.1 · Vendor: AMD
Share

Severity by source

Vendor (AMD) PRIMARY
5.3 MEDIUM
AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
SUSE
MEDIUM
qualitative

Primary rating from Vendor (AMD).

CVSS VectorVendor: AMD

Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Jun 10, 2026 - 21:54 cve.org
MEDIUM 5.3

DescriptionCVE.org

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

AnalysisAI

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of. Rated medium severity (CVSS 5.3). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity. Affected products include: Amd Amd Epyc™ 7003 Series Processors, Amd Amd Epyc™ 9004 Series Processor.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Amd Epyc 7003 Series Processors

View all
CVE-2025-54502 HIGH
7.1 Apr 16

Local privilege escalation in the AMD Platform Configuration Blob (APCB) SMM driver, shipped in AGESA firmware across ne
CVE-2025-61971 MEDIUM
5.9 May 13

Missing hardware lock bit protection on NBIO registers in AMD EPYC server processors (7003/8004/9004/9005 series, includ
CVE-2025-54510 MEDIUM
5.9 Apr 16

Missing lock check in the AMD Platform Security Processor (PSP) across multiple EPYC server CPU generations enables a lo
CVE-2023-20585 MEDIUM
5.6 Apr 16

Insuffient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised HV t

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected
SUSE Linux Enterprise Micro 5.5 Affected

Share

CVE-2024-21944 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy