CVE-2024-56161

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-56161", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2024-12-17T21:34:57.677Z", "datePublished": "2025-02-03T17:24:01.185Z", "dateUpdated": "2025-04-02T22:03:14.707Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "packageName": "NaplesPI 1.0.0.P", "product": "AMD EPYC\u2122 7001 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "NaplesPI 1.0.0.P"}]}, {"defaultStatus": "affected", "packageName": "RomePI 1.0.0.L", "product": "AMD EPYC\u2122 7002 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RomePI 1.0.0.L"}]}, {"defaultStatus": "affected", "packageName": "MilanPI 1.0.0.F", "product": "AMD EPYC\u2122 7003 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "MilanPI 1.0.0.F"}]}, {"defaultStatus": "affected", "product": "AMD EPYC\u2122 9004 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "Genoa 1.0.0.E"}]}], "datePublic": "2025-02-03T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.<br>"}], "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-02-03T17:24:01.185Z"}, "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3019.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/02/04/1"}, {"url": "http://www.openwall.com/lists/oss-security/2025/03/06/2"}, {"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00024.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-04-02T22:03:14.707Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-56161", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-03T17:43:59.636370Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T20:51:23.409Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/02/04/1"}, {"url": "http://www.openwall.com/lists/oss-security/2025/03/06/2"}, {"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00024.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-04-02T22:03:14.707Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-56161", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-03T17:43:59.636370Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T20:41:27.008Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "AMD EPYC\u2122 7001 Series", "versions": [{"status": "unaffected", "version": "NaplesPI 1.0.0.P"}], "packageName": "NaplesPI 1.0.0.P", "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD EPYC\u2122 7002 Series", "versions": [{"status": "unaffected", "version": "RomePI 1.0.0.L"}], "packageName": "RomePI 1.0.0.L", "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD EPYC\u2122 7003 Series", "versions": [{"status": "unaffected", "version": "MilanPI 1.0.0.F"}], "packageName": "MilanPI 1.0.0.F", "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD EPYC\u2122 9004 Series", "versions": [{"status": "unaffected", "version": "Genoa 1.0.0.E"}], "defaultStatus": "affected"}], "datePublic": "2025-02-03T17:00:00.000Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3019.html"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.", "supportingMedia": [{"type": "text/html", "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-02-03T17:24:01.185Z"}}}, "cveMetadata": {"cveId": "CVE-2024-56161", "state": "PUBLISHED", "dateUpdated": "2025-04-02T22:03:14.707Z", "dateReserved": "2024-12-17T21:34:57.677Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2025-02-03T17:24:01.185Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "packageName": "NaplesPI 1.0.0.P", "product": "AMD EPYC\u2122 7001 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "NaplesPI 1.0.0.P"}]}, {"defaultStatus": "affected", "packageName": "RomePI 1.0.0.L", "product": "AMD EPYC\u2122 7002 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RomePI 1.0.0.L"}]}, {"defaultStatus": "affected", "packageName": "MilanPI 1.0.0.F", "product": "AMD EPYC\u2122 7003 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "MilanPI 1.0.0.F"}]}, {"defaultStatus": "affected", "product": "AMD EPYC\u2122 9004 Series", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "Genoa 1.0.0.E"}]}], "source": "psirt@amd.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP."}, {"lang": "es", "value": "La verificaci\u00f3n de firma incorrecta en el cargador de parches de microc\u00f3digo ROM de CPU AMD puede permitir que un atacante con privilegios de administrador local cargue microc\u00f3digo de CPU malicioso, lo que resulta en la p\u00e9rdida de confidencialidad e integridad de un invitado confidencial que se ejecuta bajo AMD SEV-SNP."}], "id": "CVE-2024-56161", "lastModified": "2026-06-17T08:11:46.347", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.8, "source": "psirt@amd.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-56161", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-02-03T17:43:59.636370Z", "version": "2.0.3"}}]}, "published": "2025-02-03T18:15:37.280", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3019.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2025/02/04/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2025/03/06/2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00024.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-347"}], "source": "psirt@amd.com", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: hw:amd: Vulnerability in guest VM protected by SEV when loading malicious firmware", "id": "2336408", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2336408"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.2", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "status": "draft"}, "details": ["Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.", "A vulnerability was found in hw AMD processors. This flaw allows an attacker with system administrator privileges to exploit a flaw in the microcode signature verification, enabling the loading of malicious microcode. This issue could compromise the confidentiality and integrity of guest VMs protected by AMD\u2019s Secure Encrypted Virtualization (SEV), undermining its security."], "mitigation": {"lang": "en:us", "value": "Mitigation requires updating the BIOS (for updating the firmware of the CPU). The bug affects hardware in processors of the AMD EPYC\u2122 family: Naples, Rome, Milan, Genoa, Bergamo/Siena."}, "name": "CVE-2024-56161", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "linux-firmware", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "linux-firmware", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "linux-firmware", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "linux-firmware", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-02-03T23:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-56161\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-56161\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-3019.html"], "statement": "Red Hat has very limited to no visibility and control over binary blobs provided by third-party vendors. Red Hat relies heavily on the vendors to provide timely updates and information about included changes for this content and in most cases merely acts as a release vehicle between the third-party vendor and Red Hat customers with no possibility of influencing or even documenting the changes. Unless explicitly stated, the level of insight, oversight, and control Red Hat has does not meet the criteria required (in terms of Red Hat ownership of development processes, QA, and documentation) for releasing this content as a RHSA. For more information please contact the binary content vendor.", "threat_severity": "Important"}

{}