Detections
Analytics
CVE-2024-21944
medium
Description
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.
References
https://www.helpnetsecurity.com/2024/12/11/badram-amd-hack-cve-2024-21944/
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3015.html