Skip to content
OpenAdvisories
Medium · 6.0 CVE-2024-21963 EUVD-2024-55845GHSA-qv5f-w894-356j

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a hos…

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by AMD

Vendor: AMD Product: AMD EPYC™ 4004 Series Processors Product: AMD EPYC™ 4005 Series Processors Product: AMD EPYC™ 7001 Series Processors Product: AMD EPYC™ 7002 Series Processors Product: AMD EPYC™ 7003 Series Processors Product: AMD EPYC™ 8004 Series Processors Product: AMD EPYC™ 8005 Series Processors Product: AMD EPYC™ 9004 Series Processors Product: AMD EPYC™ 9005 Series Processors Product: AMD EPYC™ Embedded 3000 Series Processors Product: AMD EPYC™ Embedded 7002 Series Processors Product: AMD EPYC™ Embedded 7003 Series Processors Product: AMD EPYC™ Embedded 8004 Series Processors Product: AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") Product: AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") Product: AMD EPYC™ Embedded 9005 Series Processors Product: AMD Ryzen Embedded V2000A Series Processors Product: AMD Ryzen Embedded V3000 EDKII Series Processors Product: AMD Ryzen™ 2000 Mobile Processors Product: AMD Ryzen™ 4000 Series Desktop Processors Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 5000 Series Desktop Processors Product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7000 Series Desktop Processors Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 8000 Series Desktop Processors Product: AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 9000 Series Desktop Processors Product: AMD Ryzen™ 9000HX Series Processors Product: AMD Ryzen™ AI 300 Series Processors Product: AMD Ryzen™ AI Max 300 Series Processors Product: AMD Ryzen™ Embedded 5000 Series Processors Product: AMD Ryzen™ Embedded 7000 Series Processors Product: AMD Ryzen™ Embedded 8000 Series Processors Product: AMD Ryzen™ Embedded V2000 Series Processors Product: AMD Ryzen™ Embedded V3000 Series Processors Product: AMD Ryzen™ Threadripper™ 7000 WX-Series Processors Product: AMD Ryzen™ Threadripper™ 9000 series Product: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors Product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors Product: AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors Product: AMD Ryzen™ Z1 Series Processors Product: AMD Ryzen™ Z2 Series Processors Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.17 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-7.0 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.14 Package: linux-azure-6.17 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-7.0 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.14 Package: linux-azure-fde-6.17 Package: linux-azure-fde-6.2 Package: linux-azure-fde-6.8 Package: linux-azure-fde-7.0 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.17 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-7.0 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.14 Package: linux-hwe-6.17 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-7.0 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-ibm-6.8 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-lts-xenial Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.17 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-7.0 Package: linux-nvidia-bos Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.17 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oem-7.0 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.17 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-oracle-7.0 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.17 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.17 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-riscv-7.0 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Package: xen Package: xen Package: xen Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a host crash leading to loss of availability.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 7003 Series Processors — Linux kernel upstream
AMD AMD EPYC™ 7002 Series Processors — Linux kernel upstream
AMD AMD EPYC™ 9004 Series Processors — Linux kernel upstream
AMD AMD EPYC™ 7001 Series Processors — Linux kernel upstream
AMD AMD EPYC™ 4004 Series Processors — ComboAM5PI 1.2.0.3g
AMD AMD EPYC™ 9005 Series Processors — Linux kernel upstream
AMD AMD EPYC™ 8004 Series Processors — Linux kernel upstream
AMD AMD EPYC™ 4005 Series Processors — ComboAM5PI 1.2.0.3g
AMD AMD EPYC™ 8005 Series Processors — Linux kernel upstream
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors — ChagallWSPI-sWRX8 1.0.0.D
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1d
AMD AMD Ryzen™ Threadripper™ 7000 WX-Series Processors — StormPeakPI-SP6_1.1.0.0k
AMD AMD Ryzen™ 9000HX Series Processors — FireRangeFL1PI 1.0.0.0c
AMD AMD Ryzen™ AI 300 Series Processors — StrixKrackanPI-FP8_1.1.0.0d
AMD AMD Ryzen™ AI Max 300 Series Processors — StrixHaloPI-FP11_1.0.0.1c
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics — ComboAM4v2PI 1.2.0.10
AMD AMD Ryzen™ 9000 Series Desktop Processors — ComboAM5PI 1.2.0.3g
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics — PhoenixPI-FP8-FP7_1.2.0.0e
AMD AMD Ryzen™ Threadripper™ 9000 Series — ShimadaPeakPI-SP6 1.0.0.1b
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics — PhoenixPI-FP8-FP7_1.2.0.0e
AMD AMD Ryzen™ Z2 Series Processors — PhoenixPI-FP8-FP7_1.2.0.0e
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics — RenoirPI-FP6 1.0.0.Ed
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics — RembrandtPI-FP7_1.0.0.Bf
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors — ChagallWSPI-sWRX8 1.0.0.D
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics — MendocinoPI-FT6_1.0.0.7f
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics — DragonRangeFL1PI 1.0.0.3j
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors — StormPeakPI-SP6 1.0.0.1m
AMD AMD Ryzen™ 4000 Series Desktop Processors — ComboAM4v2PI 1.2.0.10
AMD AMD Ryzen™ 5000 Series Desktop Processors — ComboAM4v2PI 1.2.0.10
AMD AMD Ryzen™ 2000 Mobile Processors — ComboAM4v2PI 1.2.0.10
AMD AMD Ryzen™ 8000 Series Desktop Processors — ComboAM5PI 1.2.0.3g
AMD AMD Ryzen™ Z1 Series Processors — ComboAM5PI 1.2.0.3g
AMD AMD Ryzen™ 7000 Series Desktop Processors — ComboAM5PI 1.2.0.3g
AMD AMD EPYC™ Embedded 3000 Series Processors — Linux kernel upstream
AMD AMD EPYC™ Embedded 7002 Series Processors — Linux kernel upstream
AMD AMD EPYC™ Embedded 7003 Series Processors — Linux kernel upstream
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") — Linux kernel upstream
AMD AMD Ryzen™ Embedded 7000 Series Processors — EmbeddedAM5PI 1.0.0.5
AMD AMD Ryzen™ Embedded 8000 Series Processors — EmbeddedPhoenixPI-FP7r2_1.0.0.3
AMD AMD Ryzen™ Embedded 5000 Series Processors — EmbAM4PI 1.0.0.9
AMD AMD Ryzen™ Embedded V2000A Series Processors — EmbeddedV2KAPI-FP6 1.0.0.A
AMD AMD Ryzen™ Embedded V2000 Series Processors — EmbeddedPI-FP6_1.0.0.D
AMD AMD Ryzen™ Embedded V3000 Series Processors — Embedded-PI_FP7r2 1.0.1.1
AMD AMD Ryzen Embedded V3000 EDKII Series Processors — Embedded-PI_FP7r2 1.0.0.D
AMD AMD EPYC™ Embedded 9005 Series Processors — Linux kernel upstream
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") — Linux kernel upstream
AMD AMD EPYC™ Embedded 8004 Series Processors — Linux kernel upstream

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 xen +1 No fix yet —
Debian 13 xen +1 No fix yet —
Debian 12 xen +1 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 24.04 LTS linux-bluefield No fix yet —
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield No fix yet —
Ubuntu 26.10 xen +9 No fix yet —
Ubuntu 26.04 LTS xen +15 No fix yet —
Ubuntu 24.04 LTS xen +53 No fix yet —
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS xen +60 No fix yet —
Ubuntu 20.04 LTS xen +29 No fix yet —
Ubuntu 18.04 LTS xen +15 No fix yet —
Ubuntu 16.04 LTS xen +1 No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-realtime +3 No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-realtime +2 No fix yet —
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 24.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro 20.04 LTS linux +21 No fix yet —
Ubuntu Pro 18.04 LTS linux +12 No fix yet —
Ubuntu Pro 16.04 LTS linux +7 No fix yet —
Ubuntu Pro 14.04 LTS linux +3 No fix yet —

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.21.2-r4 —
Alpine v3.23 xen 4.20.4-r4 —
Alpine v3.22 xen 4.20.4-r4 —
Alpine v3.21 xen 4.19.6-r4 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 kernel-uek +34 6.12.0-208.112.5.1.el10uek ELSA-2026-500587
Oracle Linux 8 bpftool +18 5.15.0-326.222.4.1.el9uek ELSA-2026-500590, ELSA-2026-500588
Oracle Linux 7 kernel-uek +6 5.4.17-2136.361.4.1.el8uek ELSA-2026-500589
Oracle Linux 7 kernel-uek-tools 5.4.17-2136.361.4.1.el7uek ELSA-2026-500589

Advisories 5

References