CVE-2024-21961 PUBLISHED

Assigner: AMD
Reserved: 03.01.2024 Published: 12.02.2026 Updated: 13.02.2026

Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial of service attack against the host resulting in loss of availability.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score: 6

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Network	Confidentiality	None	Confidentiality	None
Attack Complexity	High	Integrity	None	Integrity	None
Attack Requirements	Present	Availability	High	Availability	None
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	AMD
Product	AMD EPYC™ 7002 Series Processors
Versions	Default: affected Version No Fix Planned is unaffected

Vendor	AMD
Product	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 7000 Series Desktop Processors
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 5000 Series Desktop Processors
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 3000 Series Desktop Processors
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ Z1 Series Processors
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 8000 Series Desktop Processors
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 4000 Series Desktop Processors
Versions	Default: affected Version Errata #1165,1166,1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ Z2 Series Processors
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
Versions	Default: affected Version Errata #1526 is unaffected

Vendor	AMD
Product	AMD EPYC™ Embedded 7002 Series Processors
Versions	Default: affected Version No fix planned is unaffected

Vendor	AMD
Product	AMD Ryzen™ Embedded 5000 Series Processors
Versions	Default: affected Version No fix planned is unaffected

Vendor	AMD
Product	AMD Ryzen™ Embedded V2000 Series Processors
Versions	Default: affected Version No fix planned is unaffected

Vendor	AMD
Product	AMD Ryzen™ Embedded V3000 Series Processors
Versions	Default: affected Version No fix planned is unaffected

Vendor	AMD
Product	AMD Ryzen™ Embedded 8000 Series Processors
Versions	Default: affected Version No fix planned is unaffected

Vendor	AMD
Product	AMD Ryzen™ Embedded 7000 Series Processors
Versions	Default: affected Version No fix planned is unaffected

References

Problem Types

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer CWE