PT-2025-36122 · Amd · Amd Sev-Snp

Published 2025-09-05 · Updated 2025-09-05 · CVE-2024-21977

Positive Technologies · (AI Summary)

CVSS v3.1

3.2

3.2

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions:

AMD SEV-SNP (affected versions not specified)

Description:

Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the `RDRAND` instruction, potentially resulting in loss of integrity for SEV-SNP guests.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2024-21977

Affected Products

Amd Sev-Snp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-21977 · Security Note
• https://twitter.com/VulmonFeeds/status/1963955769646194863 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html · Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html · Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html · Note
• https://twitter.com/CVEnew/status/1964018384884158711 · Twitter Post