CVE-2024-21963

Vulnerability record

Medium 6.0

Description

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a host crash leading to loss of availability.

Key facts

Published: 12 Nov 2026
Last changed: 13 Nov 2026
Assigned by: AMD
EPSS: 0.45% likely to be exploited in the next 30 days, higher than 39.628% of CVEs (scores for 15 Nov 2026)
SSVC (CISA): Exploitation: none; Automatable: no; Technical impact: partial

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

6.0CVSS 4.0, Mediumfrom the CNA (AMD)CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

No explicit remediation statement is available on this page yet. Consult the original record and vendor references before choosing a fix.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Vendor	Product	Versions
AMD	AMD EPYC™ 7003 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ 7002 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ 9004 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ 7001 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ 4004 Series Processors	Default status: affected ComboAM5PI 1.2.0.3g (unaffected)
AMD	AMD EPYC™ 9005 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ 8004 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ 4005 Series Processors	Default status: affected ComboAM5PI 1.2.0.3g (unaffected)
AMD	AMD EPYC™ 8005 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Default status: affected ChagallWSPI-sWRX8 1.0.0.D (unaffected)
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Default status: affected CezannePI-FP6_1.0.1.1d (unaffected)
AMD	AMD Ryzen™ Threadripper™ 7000 WX-Series Processors	Default status: affected StormPeakPI-SP6_1.1.0.0k (unaffected)
AMD	AMD Ryzen™ 9000HX Series Processors	Default status: affected FireRangeFL1PI 1.0.0.0c (unaffected)
AMD	AMD Ryzen™ AI 300 Series Processors	Default status: affected StrixKrackanPI-FP8_1.1.0.0d (unaffected)
AMD	AMD Ryzen™ AI Max 300 Series Processors	Default status: affected StrixHaloPI-FP11_1.0.0.1c (unaffected)
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Default status: affected ComboAM4v2PI 1.2.0.10 (unaffected)
AMD	AMD Ryzen™ 9000 Series Desktop Processors	Default status: affected ComboAM5PI 1.2.0.3g (unaffected)
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	Default status: affected PhoenixPI-FP8-FP7_1.2.0.0e (unaffected)
AMD	AMD Ryzen™ Threadripper™ 9000 Series	Default status: affected ShimadaPeakPI-SP6 1.0.0.1b (unaffected)
AMD	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Default status: affected PhoenixPI-FP8-FP7_1.2.0.0e (unaffected)
AMD	AMD Ryzen™ Z2 Series Processors	Default status: affected PhoenixPI-FP8-FP7_1.2.0.0e (unaffected)
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Default status: affected RenoirPI-FP6 1.0.0.Ed (unaffected)
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Default status: affected RembrandtPI-FP7_1.0.0.Bf (unaffected)
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	Default status: affected ChagallWSPI-sWRX8 1.0.0.D (unaffected)
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Default status: affected MendocinoPI-FT6_1.0.0.7f (unaffected)
AMD	AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	Default status: affected DragonRangeFL1PI 1.0.0.3j (unaffected)
AMD	AMD Ryzen™ AI 300 Series Processors	Default status: affected StrixKrackanPI-FP8_1.1.0.2.b (unaffected)
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Default status: affected StormPeakPI-SP6 1.0.0.1m (unaffected)
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Default status: affected ComboAM4v2PI 1.2.0.10 (unaffected)
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Default status: affected ComboAM4v2PI 1.2.0.10 (unaffected)
AMD	AMD Ryzen™ 2000 Mobile Processors	Default status: affected ComboAM4v2PI 1.2.0.10 (unaffected)
AMD	AMD Ryzen™ 8000 Series Desktop Processors	Default status: affected ComboAM5PI 1.2.0.3g (unaffected) ComboAM5PI 1.1.0.3d (unaffected)
AMD	AMD Ryzen™ Z1 Series Processors	Default status: affected ComboAM5PI 1.2.0.3g (unaffected) ComboAM5 1.0.0.c (unaffected) ComboAM5PI 1.1.0.3d (unaffected)
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Default status: affected ComboAM5PI 1.2.0.3g (unaffected) ComboAM5 1.0.0.c (unaffected) ComboAM5PI 1.1.0.3d (unaffected)
AMD	AMD EPYC™ Embedded 3000 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ Embedded 7002 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ Embedded 7003 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD Ryzen™ Embedded 7000 Series Processors	Default status: affected EmbeddedAM5PI 1.0.0.5 (unaffected)
AMD	AMD Ryzen™ Embedded 8000 Series Processors	Default status: affected EmbeddedPhoenixPI-FP7r2_1.0.0.3 (unaffected)
AMD	AMD Ryzen™ Embedded 5000 Series Processors	Default status: affected EmbAM4PI 1.0.0.9 (unaffected)
AMD	AMD Ryzen™ Embedded V2000A Series Processors	Default status: affected EmbeddedV2KAPI-FP6 1.0.0.A (unaffected)
AMD	AMD Ryzen™ Embedded V2000 Series Processors	Default status: affected EmbeddedPI-FP6_1.0.0.D (unaffected)
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Default status: affected Embedded-PI_FP7r2 1.0.1.1 (unaffected)
AMD	AMD Ryzen Embedded V3000 EDKII Series Processors	Default status: affected Embedded-PI_FP7r2 1.0.0.D (unaffected)
AMD	AMD EPYC™ Embedded 9005 Series Processors	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")	Default status: affected Linux kernel upstream (unaffected)
AMD	AMD EPYC™ Embedded 8004 Series Processors	Default status: affected Linux kernel upstream (unaffected)