CVE-2024-21963

NameCVE-2024-21963
DescriptionAMD IOMMU Out-of-Bounds Device Table Read
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)bookworm6.1.176-1vulnerable
bookworm (security)6.1.190-1vulnerable
trixie6.12.107-1vulnerable
trixie (security)6.12.116-1vulnerable
forky7.2.15-1vulnerable
sid7.3.3-1vulnerable
xen (PTS)bookworm4.17.5+72-g01140da4e8-1vulnerable
bookworm (security)4.17.7+13-g2445b30a44-0+deb12u1vulnerable
trixie4.20.3+127-gc42374a105-0+deb13u1vulnerable
trixie (security)4.20.4+63-g7abfd2bce2-0+deb13u1vulnerable
forky, sid4.20.4+63-g7abfd2bce2-1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsource(unstable)(unfixed)
xensource(unstable)(unfixed)

Notes

https://xenbits.xen.org/xsa/advisory-524.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3060.html

Search for package or bug name: Reporting problems