CVE-2024-21963

CVSS 6.0 (medium) · published 2026-11-12

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a host crash leading to loss of availability.

Weakness: CWE-125

Source: NVD CVE-2024-21963

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3060.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html
• http://www.openwall.com/lists/oss-security/2026/11/10/21
• http://xenbits.xen.org/xsa/advisory-524.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.