Xen warns some AMD IOMMUs can read past the device table
First merged summary.
Xen published XSA-524 for CVE-2024-21963, an out-of-bounds AMD IOMMU device-table read, with no fix or exploitation status given.
The Xen security team published Xen Security Advisory 524 (XSA-524) for CVE-2024-21963. The issue is an out-of-bounds read of a device table by some AMD IOMMUs. The operating system or hypervisor chooses the table’s position and size; the table holds the main configuration information for devices. According to AMD, certain IOMMUs can read past that chosen size under specific circumstances. The posted text does not name affected models, describe a fix, or state whether the flaw has been exploited.
- CVE-2024-21963 is published as Xen advisory XSA-524.
- Some AMD IOMMUs can read past a device table sized by the OS or hypervisor.
- The device table stores the main device configuration information.
- The posted text gives no models, fix, or exploitation status.
Timeline
dated events in the reporting · oldest first- Nov 10, 2026Xen publishes XSA-524 for CVE-2024-21963. · oss-security
What each outlet adds
beyond the shared facts- oss-securityQuotes AMD on out-of-bounds reads past an OS-chosen device table.
- Vendors
- AMD
- Organizations
- Xen ProjectXen security team
Coverage
oldest first · one row per article · UTC- · 10h ago
oss-securityFirst report
AMD IOMMU can read past the device table, Xen says (CVE-2024-21963)
The Xen excerpt says some AMD IOMMUs read beyond a device table whose size the OS or hypervisor chose.
- · 10h ago
Xen updates advisory on AMD Transient Scheduler Attacks (XSA-525)
The update covers CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004 after AMD reported further TSA properties.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21963 | — | — | — | ||
| CVE-2024-36350 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of… | 5.6 | <1% | ||
| CVE-2024-36357 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of… | 5.6 | <1% | ||
| CVE-2026-0004 | — | — | — |