CVE-2024-21953
CVE-2024-21953
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity.
CVSS 5.9 · Medium · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
amd epyc™ 9004 series processors
- Versions
- GenoaPI 1.0.0.F: Not affected
No fix published
amd epyc™ 8004 series processors
- Versions
- GenoaPI 1.0.0.F: Not affected
No fix published
amd epyc™ embedded 9004 series processors
- Versions
- EmbGenoaPI-SP5 1.0.0.B: Not affected
No fix published
amd64-microcode Ubuntu:24.04:LTS
- Versions
- 3.20230808.1.1ubuntu1
- 3.20231019.1ubuntu1
- 3.20231019.1ubuntu2
- 3.20231019.1ubuntu2.1
- 3.20250311.1ubuntu0.24.04.1
- 3.20251202.1ubuntu0.24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:25.10
- Versions
- 3.20240820.1ubuntu1
- 3.20250311.1ubuntu1
- 3.20250708.1ubuntu1
- 3.20251202.1ubuntu0.25.10.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:26.10
- Versions
- 3.20251202.1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:26.04:LTS
- Versions
- 3.20250708.1ubuntu1
- 3.20250708.1ubuntu2
- 3.20251202.1ubuntu1
- 3.20251202.1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published