CVE-2024-21924: AMD Epyc 7002 Processors

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.

Affected products

• AMD AMD Epyc 7002 Processors
• AMD AMD Epyc Embedded 7002 Processors
• AMD AMD Ryzen Threadripper Pro 3000wx Series Processors
• AMD AMD Ryzen Threadripper Pro 5000wx- Series Desktop Processors
• AMD AMD Ryzen Threadripper Pro 7000 Wx-Series Processors

Published 2025-02-11. Last modified 2026-06-17.