Skip to content
Fencer Vulns
medium 6.4

CVE-2024-36347 json

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load mali…

published 2025-06-27 16 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-54719

cvss
6.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 1%
public exploits
0
none known

Summary

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

Patch / fix

  • AMD AMD EPYC™ 7001 Series NaplesPI 1.0.0.P
  • AMD AMD EPYC™ 7002 Series RomePI 1.0.0.L
  • AMD AMD EPYC™ 7003 Series MilanPI 1.0.0.F
  • AMD AMD EPYC™ 9004 Series Genoa 1.0.0.E
  • AMD AMD EPYC™ 4004 Series ComboAM5PI1.0.0.a, ComboAM5PI1.1.0.3c, ComboAM5PI1.2.0.3
  • AMD AMD EPYC™ 9005 Series TurinPI 1.0.0.4
  • AMD AMD Instinct™ MI300A MI300PI_SR5 1.0.0.8
  • AMD AMD Ryzen™ 5000 Series Desktop Processors ComboAM4v2PI 1.2.0.E
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics ComboAM4v2PI 1.2.0.E
  • AMD AMD Ryzen™ 3000 Series Desktop Processors ComboAM4PI 1.0.0.D, ComboAM4v2PI 1.2.0.E
  • AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4PI 1.0.0.D, ComboAM4v2PI 1.2.0.E
  • AMD AMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.0.0.a, ComboAM5PI 1.1.0.3c, ComboAM5PI 1.2.0.3
  • AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics ComboAM4v2PI 1.2.0.E
  • AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics ComboAM5PI 1.1.0.3c, ComboAM5PI 1.2.0.3
  • AMD AMD Ryzen™ 9000 Series Desktop Processors ComboAM5PI 1.2.0.3c
  • AMD AMD Ryzen™ Threadripper™ 3000 Series Processors CastlePeakPI-SP3r3 1.0.0.E
  • AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.0.0.1k, StormPeakPI-SP6 1.1.0.0i
  • AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors CastlePeakWSPI-sWRX8 1.0.0.g, ChagallWSPI-sWRX8 1.0.0.B
  • AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors ChagallWSPI-sWRX8 1.0.0.B
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.1.2b
  • AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics PicassoPI-FP5 1.0.1.2b
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.Eb
  • AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.1.1b
  • AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics MendocinoPI-FT6 1.0.0.7b
  • AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.Bb
  • AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.Bb
  • AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.1.1b
  • AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics PhoenixPI-FP8-FP7 1.2.0.0
  • AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7 1.2.0.0
  • AMD AMD Ryzen™ 7045 Series Mobile Processors DragonRangeFL1 1.0.0.3g
  • linux Ubuntu 24.04 LTS 6.8.0-110.110
  • linux Ubuntu 25.10 6.17.0-22.22
  • linux-aws Ubuntu 24.04 LTS 6.8.0-1052.55
  • linux-aws Ubuntu 25.10 6.17.0-1012.12
  • linux-gcp Ubuntu 24.04 LTS 6.8.0-1054.57
  • linux-gcp Ubuntu 25.10 6.17.0-1012.12
  • linux-gke Ubuntu 24.04 LTS 6.8.0-1050.56
  • linux-ibm Ubuntu 24.04 LTS 6.8.0-1051.51

ubuntu advisories UBUNTU-CVE-2024-36347

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-36347 updated cvss 7.5

kernel: hw:amd: Improper signature verification in AMD CPU ROM microcode patch loader

  • Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernel
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
16 mo ago

Exploit prediction

0.11% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • AMD AMD EPYC™ 7001 Series
  • AMD AMD EPYC™ 7002 Series
  • AMD AMD EPYC™ 7003 Series
  • AMD AMD EPYC™ 9004 Series
  • AMD AMD EPYC™ 4004 Series
  • AMD AMD EPYC™ 9005 Series
  • AMD AMD Instinct™ MI300A
  • AMD AMD Ryzen™ 5000 Series Desktop Processors
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 3000 Series Desktop Processors
  • AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7000 Series Desktop Processors
  • AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 9000 Series Desktop Processors
  • AMD AMD Ryzen™ Threadripper™ 3000 Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7045 Series Mobile Processors
  • AMD AMD Ryzen™ AI 300 Series
  • AMD AMD Ryzen™ AI Max +
  • AMD AMD Ryzen™ 9000HX Series Mobile Processors
  • AMD AMD EPYC™ Embedded 3000
  • AMD AMD EPYC™ Embedded 7002
  • AMD AMD EPYC™ Embedded 7003
  • AMD AMD EPYC™ Embedded 8004
  • AMD AMD EPYC™ Embedded 9004
  • AMD AMD EPYC™ Embedded 97X4
  • AMD AMD Ryzen™ Embedded R1000
  • AMD AMD Ryzen™ Embedded R2000
  • AMD AMD Ryzen™ Embedded 5000
  • AMD AMD Ryzen™ Embedded 7000
  • AMD AMD Ryzen™ Embedded V1000
  • AMD AMD Ryzen™Embedded V2000
  • AMD AMD Ryzen™Embedded V3000

Classification

Weakness
  • CWE-347 Improper Verification of Cryptographic Signature

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.