CVE-2024-36331

Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity.

Score

CVSS 3.1 3.2 Low

Status

Deferred - psirt@amd.com

Published

2025-09-06

Last modified

2025-11-03

Weaknesses

CWE-665

Affected products

• Amd Epyc 9004 Series Processors (Amd)
• Amd Epyc Embedded 9004 Series Processors (Amd)
• Epyc Embedded 9004 Series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html