Skip to content
fr Sign in
5.7 Medium

CVE-2024-21981 Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained…

Description

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7001 Series Processors Versions not published
AMD EPYC™ 7002 Series Processors Versions not published
AMD EPYC™ 7003 Series Processors Versions not published
AMD Ryzen™ 3000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Versions not published
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors Versions not published
Show the 14 other branches
Product Affected versions Fixed in
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 5000WX Processors Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics Versions not published
AMD EPYC™ Embedded 3000 Series Processors Versions not published
AMD EPYC™ Embedded 7002 Series Processors Versions not published
AMD EPYC™ Embedded 7003 Series Processors Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
AMD Ryzen™ Embedded 5000 Series Processors Versions not published
AMD Ryzen™ Embedded V1000 Series Processors Versions not published
athlon Versions not published
ryzen Versions not published
epyc Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 7001 Series Processors

The 10 CVEs of AMD EPYC™ 7001 Series Processors →
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-54505 A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the… 2.0 Low CVE-2023-31364 Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… 8.3 High
Track this CVE