CVE-2024-21944
No fix known EPSS <1%CVSS 5.3
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.
Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processor