Buffer overflow in AMD Epyc™ 7002 Series Processors
CVE-2024-21961
Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial of service attack against the host resulting in loss of availability.
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.003 (26.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 27th percentile — 26.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000
Affected products
- AMD Epyc™ 7002 Series Processors — versions No Fix Planned
- AMD Epyc™ Embedded 7002 Series Processors — versions No fix planned
- AMD Ryzen™ 3000 Series Desktop Processors — versions Errata #1165,1166,1526
- AMD Ryzen™ 4000 Series Desktop Processors — versions Errata #1165,1166,1526
- AMD Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics — versions Errata #1165,1166,1526
- AMD Ryzen™ 5000 Series Desktop Processors — versions Errata #1165,1166,1526
- AMD Ryzen™ 5000 Series Desktop Processors With Radeon™ Graphics — versions Errata #1165,1166,1526
- AMD Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics — versions Errata #1165,1166,1526
- AMD Ryzen™ 6000 Series Processors With Radeon™ Graphics — versions Errata #1526
- AMD Ryzen™ 7000 Series Desktop Processors — versions Errata #1526