CVE-2024-21944
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AMD EPYC™ 7003 Series Processors
- Vendor
- AMD
- Product
- AMD EPYC™ 7003 Series Processors
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Milan PI 1.0.0.D | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| SEV FW 1.55.22 (hex 1.37.16) | unaffected | Unavailable | Unavailable | Unavailable | None listed |
AMD EPYC™ 9004 Series Processor
- Vendor
- AMD
- Product
- AMD EPYC™ 9004 Series Processor
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Genoa PI 1.0.0.D | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| SEV FW 1.55.38 (hex 1.37.26) | unaffected | Unavailable | Unavailable | Unavailable | None listed |