Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-21978: Hypervisor can read or overwrite guest memory on SEV-SNP

CVE-2024-21978 · published 2 years ago

Summary

If not fixed, a malicious hypervisor could access sensitive data in your virtual machines or corrupt their files. To protect your virtual machines, apply the latest updates for SEV-SNP, especially if you're using this technology. This fix should be a priority if you're running sensitive workloads or storing confidential information.

What to do

Update amd epyc_7203_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7203p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_72f3_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7303_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7303p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7313_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7313p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7343_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_73f3_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7373x_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7413_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7443_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7443p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_74f3_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7453_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7473x_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7513_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7543_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7543p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_75f3_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7573x_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7643_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7773x_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7643p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7663_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7663p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7713_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7713p_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_7763_firmware to version milanpi_1.0.0.d or later.
Update amd epyc_8024pn_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8024p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8124pn_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8124p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8224pn_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8224p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8324pn_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8324p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8434pn_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8434p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8534pn_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_8534p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9734_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9754s_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9754_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9184x_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9384x_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9684x_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9124_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9174f_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9224_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9254_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9274f_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9334_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9354_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9354p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9374f_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9454_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9454p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9474f_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9534_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9554_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9554p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9634_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9654_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_9654p_firmware to version genoapi_1.0.0.c or later.
Update amd epyc_embedded_7313_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7313p_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7413_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7443_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7443p_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7543_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7543p_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7643_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7713_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_7713p_firmware to version embmilanpi-sp3_1.0.0.9 or later.
Update amd epyc_embedded_9124_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9254_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9354_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9354p_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9454_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9454p_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9534_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9554_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9554p_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9654_firmware to version embgenoapi-sp5_1.0.0.7 or later.
Update amd epyc_embedded_9654p_firmware to version embgenoapi-sp5_1.0.0.7 or later.

Affected software

Vendor	Product	Affected versions
amd	epyc_7203_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7203_firmware::::::::`
amd	epyc_7203p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7203p_firmware::::::::`
amd	epyc_72f3_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_72f3_firmware::::::::`
amd	epyc_7303_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7303_firmware::::::::`
amd	epyc_7303p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7303p_firmware::::::::`
amd	epyc_7313_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7313_firmware::::::::`
amd	epyc_7313p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7313p_firmware::::::::`
amd	epyc_7343_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7343_firmware::::::::`
amd	epyc_73f3_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_73f3_firmware::::::::`
amd	epyc_7373x_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7373x_firmware::::::::`
amd	epyc_7413_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7413_firmware::::::::`
amd	epyc_7443_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7443_firmware::::::::`
amd	epyc_7443p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7443p_firmware::::::::`
amd	epyc_74f3_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_74f3_firmware::::::::`
amd	epyc_7453_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7453_firmware::::::::`
amd	epyc_7473x_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7473x_firmware::::::::`
amd	epyc_7513_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7513_firmware::::::::`
amd	epyc_7543_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7543_firmware::::::::`
amd	epyc_7543p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7543p_firmware::::::::`
amd	epyc_75f3_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_75f3_firmware::::::::`
amd	epyc_7573x_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7573x_firmware::::::::`
amd	epyc_7643_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7643_firmware::::::::`
amd	epyc_7773x_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7773x_firmware::::::::`
amd	epyc_7643p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7643p_firmware::::::::`
amd	epyc_7663_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7663_firmware::::::::`
amd	epyc_7663p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7663p_firmware::::::::`
amd	epyc_7713_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7713_firmware::::::::`
amd	epyc_7713p_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7713p_firmware::::::::`
amd	epyc_7763_firmware	< milanpi_1.0.0.d `cpe:2.3:o:amd:epyc_7763_firmware::::::::`
amd	epyc_8024pn_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8024pn_firmware::::::::`
amd	epyc_8024p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8024p_firmware::::::::`
amd	epyc_8124pn_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8124pn_firmware::::::::`
amd	epyc_8124p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8124p_firmware::::::::`
amd	epyc_8224pn_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8224pn_firmware::::::::`
amd	epyc_8224p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8224p_firmware::::::::`
amd	epyc_8324pn_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8324pn_firmware::::::::`
amd	epyc_8324p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8324p_firmware::::::::`
amd	epyc_8434pn_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8434pn_firmware::::::::`
amd	epyc_8434p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8434p_firmware::::::::`
amd	epyc_8534pn_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8534pn_firmware::::::::`
amd	epyc_8534p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_8534p_firmware::::::::`
amd	epyc_9734_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9734_firmware::::::::`
amd	epyc_9754s_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9754s_firmware::::::::`
amd	epyc_9754_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9754_firmware::::::::`
amd	epyc_9184x_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9184x_firmware::::::::`
amd	epyc_9384x_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9384x_firmware::::::::`
amd	epyc_9684x_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9684x_firmware::::::::`
amd	epyc_9124_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9124_firmware::::::::`
amd	epyc_9174f_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9174f_firmware::::::::`
amd	epyc_9224_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9224_firmware::::::::`

Showing 50 of 86. Show the rest

Vendor	Product	Affected versions
amd	epyc_9254_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9254_firmware::::::::`
amd	epyc_9274f_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9274f_firmware::::::::`
amd	epyc_9334_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9334_firmware::::::::`
amd	epyc_9354_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9354_firmware::::::::`
amd	epyc_9354p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9354p_firmware::::::::`
amd	epyc_9374f_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9374f_firmware::::::::`
amd	epyc_9454_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9454_firmware::::::::`
amd	epyc_9454p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9454p_firmware::::::::`
amd	epyc_9474f_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9474f_firmware::::::::`
amd	epyc_9534_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9534_firmware::::::::`
amd	epyc_9554_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9554_firmware::::::::`
amd	epyc_9554p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9554p_firmware::::::::`
amd	epyc_9634_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9634_firmware::::::::`
amd	epyc_9654_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9654_firmware::::::::`
amd	epyc_9654p_firmware	< genoapi_1.0.0.c `cpe:2.3:o:amd:epyc_9654p_firmware::::::::`
amd	epyc_embedded_7313_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7313_firmware::::::::`
amd	epyc_embedded_7313p_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7313p_firmware::::::::`
amd	epyc_embedded_7413_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7413_firmware::::::::`
amd	epyc_embedded_7443_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7443_firmware::::::::`
amd	epyc_embedded_7443p_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7443p_firmware::::::::`
amd	epyc_embedded_7543_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7543_firmware::::::::`
amd	epyc_embedded_7543p_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7543p_firmware::::::::`
amd	epyc_embedded_7643_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7643_firmware::::::::`
amd	epyc_embedded_7713_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7713_firmware::::::::`
amd	epyc_embedded_7713p_firmware	< embmilanpi-sp3_1.0.0.9 `cpe:2.3:o:amd:epyc_embedded_7713p_firmware::::::::`
amd	epyc_embedded_9124_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9124_firmware::::::::`
amd	epyc_embedded_9254_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9254_firmware::::::::`
amd	epyc_embedded_9354_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9354_firmware::::::::`
amd	epyc_embedded_9354p_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9354p_firmware::::::::`
amd	epyc_embedded_9454_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9454_firmware::::::::`
amd	epyc_embedded_9454p_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9454p_firmware::::::::`
amd	epyc_embedded_9534_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9534_firmware::::::::`
amd	epyc_embedded_9554_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9554_firmware::::::::`
amd	epyc_embedded_9554p_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9554p_firmware::::::::`
amd	epyc_embedded_9654_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9654_firmware::::::::`
amd	epyc_embedded_9654p_firmware	< embgenoapi-sp5_1.0.0.7 `cpe:2.3:o:amd:epyc_embedded_9654p_firmware::::::::`

Original advisory text

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

References

https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.h... Broken Link

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.9 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published5 Aug 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-21978 · NVD

Track software like this

Free during beta