CVSS 4.0
6.0 mediumCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NCVE-2024-21963 amd: Out-of-bounds Read
Medium (6.0) in amd. EPSS 0.4% estimated probability of exploitation activity in the next 30 days.
On this page
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a host crash leading to loss of availability.
Severity
- EPSS
- 0.4% estimated probability of exploitation activity in the next 30 days; 40th percentile. Scored 2026-11-13. A forecast for this CVE across the internet, not for your own systems.
- CISA's assessment (SSVC)
- Exploitation: none · Automatable: no · Technical impact: partial, assessed 2026-11-13. From CISA's Vulnrichment in the CVE List: whether it is exploited, whether exploiting it can be automated, and how much control it gives.
- CWE
- CWE-125 Out-of-bounds Read
- Published
- Modified
- Assigned by
- AMD (CNA)
- NVD analysis
- Awaiting analysis
- Record from
- the NVD, synced
Ask an AI about this CVE
Show the prompt
Explain CVE-2024-21963 for an engineer deciding whether to act. Use https://cve.bz/api/public/cves/CVE-2024-21963?via=ask-ai-copy and https://cve.bz/cve/CVE-2024-21963?via=ask-ai-copy as the source of truth: what is affected and which versions fix it, whether it is in CISA KEV, public exploits, and its EPSS (an internet-wide 30-day estimate of exploitation activity, not a forecast for my systems). If they give no fixed versions, use the CVE record https://cveawg.mitre.org/api/cve/CVE-2024-21963 or the vendor advisory, not third-party mirrors. Tell me how to check whether I am affected and how to verify a fix. Cite the sources and say where they are uncertain.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this CVE's id and public links.
Badge for a README or a site
An image that stays current: it is drawn from the data each time it is fetched (a host that proxies images, as GitHub does, may show its copy for a while). Markdown:
[](https://cve.bz/cve/CVE-2024-21963)
HTML:
<a href="https://cve.bz/cve/CVE-2024-21963"><img src="https://cve.bz/cve/badge/CVE-2024-21963.svg" alt="CVE-2024-21963"></a>
Affected
- amd:amd epyc™ 4004 series processors
- amd:amd epyc™ 4005 series processors
- amd:amd epyc™ 7001 series processors
- amd:amd epyc™ 7002 series processors
- amd:amd epyc™ 7003 series processors
- amd:amd epyc™ 8004 series processors
- amd:amd epyc™ 8005 series processors
- amd:amd epyc™ 9004 series processors
- amd:amd epyc™ 9005 series processors
- amd:amd epyc™ embedded 3000 series processors
- amd:amd epyc™ embedded 7002 series processors
- amd:amd epyc™ embedded 7003 series processors
- amd:amd epyc™ embedded 8004 series processors
- amd:amd epyc™ embedded 9004 series processors (formerly codenamed "bergamo")
- amd:amd epyc™ embedded 9004 series processors (formerly codenamed "genoa")
- amd:amd epyc™ embedded 9005 series processors
- amd:amd ryzen embedded v3000 edkii series processors
- amd:amd ryzen™ 2000 mobile processors
- amd:amd ryzen™ 4000 series desktop processors
- amd:amd ryzen™ 4000 series mobile processors with radeon™ graphics
- amd:amd ryzen™ 5000 series desktop processors
- amd:amd ryzen™ 5000 series desktop processors with radeon™ graphics
- amd:amd ryzen™ 5000 series mobile processors with radeon™ graphics
- amd:amd ryzen™ 6000 series processors with radeon™ graphics
- amd:amd ryzen™ 7000 series desktop processors
- amd:amd ryzen™ 7020 series processors with radeon™ graphics
- amd:amd ryzen™ 7040 series mobile processors with radeon™ graphics
- amd:amd ryzen™ 7045 series mobile processors with radeon™ graphics
- amd:amd ryzen™ 8000 series desktop processors
- amd:amd ryzen™ 8040 series mobile processors with radeon™ graphics
- amd:amd ryzen™ 9000 series desktop processors
- amd:amd ryzen™ 9000hx series processors
- amd:amd ryzen™ ai 300 series processors
- amd:amd ryzen™ ai max 300 series processors
- amd:amd ryzen™ embedded 5000 series processors
- amd:amd ryzen™ embedded 7000 series processors
- amd:amd ryzen™ embedded 8000 series processors
- amd:amd ryzen™ embedded v2000 series processors
- amd:amd ryzen™ embedded v2000a series processors
- amd:amd ryzen™ embedded v3000 series processors
- amd:amd ryzen™ threadripper™ 7000 wx-series processors
- amd:amd ryzen™ threadripper™ 9000 series
- amd:amd ryzen™ threadripper™ pro 3000 wx-series processors
- amd:amd ryzen™ threadripper™ pro 5000 wx-series processors
- amd:amd ryzen™ threadripper™ pro 7000 wx-series processors
- amd:amd ryzen™ z1 series processors
- amd:amd ryzen™ z2 series processors
Fix and patched versions
Linux distributions
| Distribution | Release | Package | Fixed in | Advisory |
|---|---|---|---|---|
| Debian | 12, 13, 14 | xen, linux | no fix listed | DEBIAN-CVE-2024-21963 |
| Ubuntu | 16.04:LTS | xen, linux-hwe-edge | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | 18.04:LTS | xen, linux-gcp, linux-hwe and 13 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | 20.04:LTS | xen, linux-gke, linux-gkeop and 27 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | 22.04:LTS | xen, linux, linux-aws and 58 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | 24.04:LTS | xen, linux, linux-aws and 51 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | 26.04:LTS | xen, linux, linux-aws and 13 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | 26.10 | xen, linux, linux-aws and 7 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | Nvidia-BlueField:22.04:LTS, Nvidia-BlueField:24.04:LTS | linux-bluefield | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | Pro:14.04:LTS | linux, linux-aws, linux-azure and 1 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | Pro:16.04:LTS | linux, linux-aws, linux-gcp and 5 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | Pro:18.04:LTS | linux, linux-aws, linux-kvm and 10 more | no fix listed | UBUNTU-CVE-2024-21963 |
| Ubuntu | Pro:20.04:LTS | linux, linux-aws, linux-gcp and 19 more | no fix listed | UBUNTU-CVE-2024-21963 |
| 4 more for Ubuntu in the JSON and on Ubuntu's page. | ||||
| Alpine | v3.21 | xen | 4.19.6-r4 | ALPINE-CVE-2024-21963 |
| Alpine | v3.22, v3.23 | xen | 4.20.4-r4 | ALPINE-CVE-2024-21963 |
| Alpine | v3.24 | xen | 4.21.2-r4 | ALPINE-CVE-2024-21963 |
From the distributions' data via OSV.dev: the Debian Security Tracker; Ubuntu Security Notices © Canonical Ltd., CC BY-SA 4.0; the Alpine secdb, CC BY-SA 4.0. Modified: reformatted and linked to CVE records. Credits. On the distributions' own pages: Debian · Ubuntu · Alpine.
Attack patterns (CAPEC)
- CAPEC-540 Overread Buffers Likelihood: Low · Severity: High
The attack patterns MITRE's CAPEC relates to this record's weaknesses, as MITRE names them. Credits.