CVE-2024-21977: AMD Epyc 7003 Series Processors

Low severity, CVSS 3.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests.

Affected products

• AMD AMD Epyc 7003 Series Processors
• AMD AMD Epyc 8004 Series Processors
• AMD AMD Epyc 9004 Series Processors
• AMD AMD Epyc Embedded 7003 Series Processors
• AMD AMD Epyc Embedded 9004 Series Processors
• AMD AMD Ryzen 5000 Series Desktop Processors
• AMD AMD Ryzen 5000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 6000 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7000 Series Desktop Processors
• AMD AMD Ryzen 7030 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 7035 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7040 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 7045 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 8000 Series Desktop Processors
• AMD AMD Ryzen Embedded 5000 Series Processors
• AMD AMD Ryzen Embedded 7000 Series Processors
• AMD AMD Ryzen Embedded 8000 Series Processors
• AMD AMD Ryzen Embedded v3000 Series Processors
• AMD AMD Ryzen Threadripper Pro 3000 Wx-Series Processors
• AMD AMD Ryzen Threadripper Pro 5000 Wx-Series Processors

Published 2025-09-05. Last modified 2026-06-17.