What is the fix for CVE-2024-21954?

Update BIOS from your OEM that includes AMD PI firmware: EPYC 7003 MilanPI-SP3_1.0.0.J or later; EPYC 9004 GenoaPI_1.0.0.H or later; EPYC Embedded 7003 EmbMilanPI-SP3 1.0.0.D; EPYC Embedded 9004 EmbGenoaPI-SP5 1.0.0.D. Fixed in AMD PI releases to OEMs 2025-12-02 to 2026-02-02; bulletin AMD-SB-3052.

Post Share

HIGH7.0CVSS · psirt@amd.com

NO KNOWN
EXPLOIT

AMD EPYC 7003 SERIES · CVE-2024-21954 · Infrastructure

AMD IOMMU: bad exception handling lets invalidate commands crash PCIe devices

Q: Who is not affected by CVE-2024-21954?

Not affected if: no-amd-epyc, no-untrusted-guest-vms.

FIX → MilanPI-SP3_1.0.0.J · GenoaPI_1.0.0.H · EmbMilanPI-SP3 1.0.0.D · EmbGenoaPI-SP5 1.0.0.D ✓ verified

AMD IOMMU invalidation handling can send invalidate requests to PCIe devices without Address Translation Cache support. A guest VM attacker could make the IOMMU wait indefinitely for a completion, causing denial of service to the hypervisor and/or other guests. AMD rates it CVSS 4.0 7.0. Fixed via OEM BIOS updates carrying new PI firmware.

Full story ↓Less ↑

first public Nov 12, 2026 · 2 sources

Check it with your coding agent

It reads this page and tells you if your code or app is affected.

Claude CodeCodexCursorAdd to your agent

01 · Who is affected

✓ Verified Nov 12

Servers running AMD EPYC 7003, 9004, Embedded 7003 or Embedded 9004 processors whose BIOS predates the fixed AMD PI firmware. It matters most for hypervisors hosting guest VMs you do not trust, since a guest can hang the IOMMU and impact the host and other guests. Desktop, non-EPYC and single-tenant systems can mostly skip it.

AMD EPYC 7003 SeriesPI firmware before MilanPI-SP3_1.0.0.Jfixed in MilanPI-SP3_1.0.0.J
AMD EPYC 9004 SeriesPI firmware before GenoaPI_1.0.0.Hfixed in GenoaPI_1.0.0.H
AMD EPYC Embedded 7003 SeriesPI firmware before EmbMilanPI-SP3 1.0.0.Dfixed in EmbMilanPI-SP3 1.0.0.D
AMD EPYC Embedded 9004 SeriesPI firmware before EmbGenoaPI-SP5 1.0.0.Dfixed in EmbGenoaPI-SP5 1.0.0.D

Not affected if no-amd-epyc, no-untrusted-guest-vms

Who cares amd, bios, epyc, firmware, iommu, pcie, self-hosted, servers, virtualization

02 · How to check

Check whether servers use AMD EPYC 7003 (Milan), 9004 (Genoa) or Embedded 7003/9004 CPUs (lscpu), then compare the BIOS/AGESA PI version (dmidecode -t bios, or the OEM's BIOS release notes) against the fixed PI versions

Exploited: No reports yet
Public exploit: None on GitHub
EPSS: Not scored
Last updated: Nov 12, 2026

How it unfolded

2 events · Nov 12, 2026 → Nov 12, 2026

Nov 12, 202619:40 UTCNVD CVE-2024-21954
Nov 12, 202619:41 UTCInfraStack Analyst Read AMD-SB-3052 (AMD's own bulletin); affected: EPYC 7003, 9004, Embedded 7003, Embedded 9004 with PI firmware fixes listed. No exploitation or PoC found; no social search done (low-noise B-tier).moreless

What the sources say, verbatim

194 characters

Improper exception handling in IOMMU could allow an invalidate command to be sent to PCIe devices that do not support Address Translation Cache (ATC), potentially resulting in denial of service.

Sources and references

NVD: CVE-2024-21954Nov 12, 2026
AMD-SB-3052 IOMMU Improper Exception Handling and SMM OOB WriteAdvisory · amd.com

This page as .md · .json · CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.

Are you affected?

Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.

InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.

InfraStack checks it against your stack and answers on your report, with the evidence and the fix.

Run the check

Get the next AMD EPYC 7003 Series threat the day it hits your stack.

Start free

Post Share

HIGH7.0CVSS · psirt@amd.com

NO KNOWN
EXPLOIT

AMD EPYC 7003 SERIES · CVE-2024-21954 · Infrastructure

AMD IOMMU: bad exception handling lets invalidate commands crash PCIe devices

FIX → MilanPI-SP3_1.0.0.J · GenoaPI_1.0.0.H · EmbMilanPI-SP3 1.0.0.D · EmbGenoaPI-SP5 1.0.0.D ✓ verified

Full story ↓Less ↑

first public Nov 12, 2026 · 2 sources

Check it with your coding agent

It reads this page and tells you if your code or app is affected.

Claude CodeCodexCursorAdd to your agent

01 · Who is affected

✓ Verified Nov 12

AMD EPYC 7003 SeriesPI firmware before MilanPI-SP3_1.0.0.Jfixed in MilanPI-SP3_1.0.0.J
AMD EPYC 9004 SeriesPI firmware before GenoaPI_1.0.0.Hfixed in GenoaPI_1.0.0.H
AMD EPYC Embedded 7003 SeriesPI firmware before EmbMilanPI-SP3 1.0.0.Dfixed in EmbMilanPI-SP3 1.0.0.D
AMD EPYC Embedded 9004 SeriesPI firmware before EmbGenoaPI-SP5 1.0.0.Dfixed in EmbGenoaPI-SP5 1.0.0.D

Not affected if no-amd-epyc, no-untrusted-guest-vms

Who cares amd, bios, epyc, firmware, iommu, pcie, self-hosted, servers, virtualization

02 · How to check

Check whether servers use AMD EPYC 7003 (Milan), 9004 (Genoa) or Embedded 7003/9004 CPUs (lscpu), then compare the BIOS/AGESA PI version (dmidecode -t bios, or the OEM's BIOS release notes) against the fixed PI versions

Exploited: No reports yet
Public exploit: None on GitHub
EPSS: Not scored
Last updated: Nov 12, 2026

How it unfolded

2 events · Nov 12, 2026 → Nov 12, 2026

Nov 12, 202619:40 UTCNVD CVE-2024-21954
Nov 12, 202619:41 UTCInfraStack Analyst Read AMD-SB-3052 (AMD's own bulletin); affected: EPYC 7003, 9004, Embedded 7003, Embedded 9004 with PI firmware fixes listed. No exploitation or PoC found; no social search done (low-noise B-tier).moreless

What the sources say, verbatim

194 characters

Improper exception handling in IOMMU could allow an invalidate command to be sent to PCIe devices that do not support Address Translation Cache (ATC), potentially resulting in denial of service.

Sources and references

NVD: CVE-2024-21954Nov 12, 2026
AMD-SB-3052 IOMMU Improper Exception Handling and SMM OOB WriteAdvisory · amd.com

NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.

Are you affected?

Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.

InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.

InfraStack checks it against your stack and answers on your report, with the evidence and the fix.

Run the check

Get the next AMD EPYC 7003 Series threat the day it hits your stack.

Start free

AMD IOMMU: bad exception handling lets invalidate commands crash PCIe devices

01 · Who is affected

02 · How to check

How it unfolded

What the sources say, verbatim

Sources and references

Read next

Get the next AMD EPYC 7003 Series threat the day it hits your stack.

AMD IOMMU: bad exception handling lets invalidate commands crash PCIe devices

01 · Who is affected

02 · How to check

How it unfolded

What the sources say, verbatim

Sources and references

Read next

Get the next AMD EPYC 7003 Series threat the day it hits your stack.

03 · The fix