CVE-2024-56161
Not scored
CVE-2024-56161
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.
Exploit probability
0.5%
Published
February 3, 2025
Required by
Not available
Last source change
July 10, 2026
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2024-56161
View original source
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.
05 / REFERENCES
Further evidence
- http://www.openwall.com/lists/oss-security/2025/02/04/1
- http://www.openwall.com/lists/oss-security/2025/03/06/2
- https://lists.debian.org/debian-lts-announce/2025/03/msg00024.html
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3019.html
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html