CVE-2024-21962

AMD RAID Driver Improper Input Validation Enables Privilege Escalation and Arbitrary Code Execution

Published May 15, 2026 CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Description
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd epyc 4004 Series Processors
Amd epyc 4005 Series Processors
Amd epyc Embedded 9005 Series Processors
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 6000 Series Processors With Radeon Graphics
Amd ryzen 7000 Series Desktop Processors
Amd ryzen 7020 Series Processors With Radeon Graphics
Amd ryzen 7040 Series Mobile Processors With Radeon Graphics
Amd ryzen 7045 Series Mobile Processors With Radeon Graphics
Amd ryzen 8000 Series Desktop Processors
Amd ryzen 8040 Series Mobile Processors With Radeon Graphics
Amd ryzen 9000 Series Desktop Processors
Amd ryzen 9000hx Series Processors
Amd ryzen Ai 300 Series Processors
Amd ryzen Threadripper 9000
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Amd ryzen Threadripper Pro 7000 Wx-series Processors
Amd ryzen Z2 Series Processors
Vendors & Products Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd epyc 4004 Series Processors
Amd epyc 4005 Series Processors
Amd epyc Embedded 9005 Series Processors
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 6000 Series Processors With Radeon Graphics
Amd ryzen 7000 Series Desktop Processors
Amd ryzen 7020 Series Processors With Radeon Graphics
Amd ryzen 7040 Series Mobile Processors With Radeon Graphics
Amd ryzen 7045 Series Mobile Processors With Radeon Graphics
Amd ryzen 8000 Series Desktop Processors
Amd ryzen 8040 Series Mobile Processors With Radeon Graphics
Amd ryzen 9000 Series Desktop Processors
Amd ryzen 9000hx Series Processors
Amd ryzen Ai 300 Series Processors
Amd ryzen Threadripper 9000
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Amd ryzen Threadripper Pro 7000 Wx-series Processors
Amd ryzen Z2 Series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title AMD RAID Driver Improper Input Validation Enables Privilege Escalation and Arbitrary Code Execution
Type Values Removed Values Added
Description Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
Weaknesses CWE-1220
References
Metrics cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
May 16, 2026, 3:56 AM
Reserved
Jan 3, 2024, 4:43 PM
Status
Awaiting Analysis
Published
May 15, 2026, 3:16 AM
Modified
Oct 27, 2026, 6:10 PM