high7.9
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in …
Impact
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7203 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7203p Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 72f3 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7303 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7303p Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7313 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7313p Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7343 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 73f3 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7373x Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7413 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7443 Firmware | before milanpi_1.0.0.d |