---
id: "CVE-2024-21954"
page: "https://infrastack.ai/live/CVE-2024-21954"
kind: "vulnerability"
aliases: ["CVE-2024-21954"]
title: "AMD IOMMU: bad exception handling lets invalidate commands crash PCIe devices"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "AMD EPYC 7003 Series", "fixed": ["MilanPI-SP3_1.0.0.J"], "affected": "PI firmware before MilanPI-SP3_1.0.0.J", "ecosystem": "vendor"}, {"name": "AMD EPYC 9004 Series", "fixed": ["GenoaPI_1.0.0.H"], "affected": "PI firmware before GenoaPI_1.0.0.H", "ecosystem": "vendor"}, {"name": "AMD EPYC Embedded 7003 Series", "fixed": ["EmbMilanPI-SP3 1.0.0.D"], "affected": "PI firmware before EmbMilanPI-SP3 1.0.0.D", "ecosystem": "vendor"}, {"name": "AMD EPYC Embedded 9004 Series", "fixed": ["EmbGenoaPI-SP5 1.0.0.D"], "affected": "PI firmware before EmbGenoaPI-SP5 1.0.0.D", "ecosystem": "vendor"}]
ecosystems: []
tags: ["amd", "bios", "epyc", "firmware", "infrastructure", "iommu", "pcie", "self-hosted", "servers", "virtualization"]
not_affected_if: ["no-amd-epyc", "no-untrusted-guest-vms"]
published_at: "2026-11-12T19:16:44+00:00"
first_seen_at: "2026-11-12T19:40:12+00:00"
updated_at: "2026-11-12T19:41:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21954", "first_seen_at": "2026-11-12T19:40:12+00:00"}, {"source": "analyst", "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3052.html", "first_seen_at": "2026-11-12T19:41:40+00:00", "cites": ["https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3052.html"]}]
exploit_sources: []
---

# AMD IOMMU: bad exception handling lets invalidate commands crash PCIe devices

Link for people: https://infrastack.ai/live/CVE-2024-21954 (this .md is for agents)

AMD IOMMU invalidation handling can send invalidate requests to PCIe devices without Address Translation Cache support. A guest VM attacker could make the IOMMU wait indefinitely for a completion, causing denial of service to the hypervisor and/or other guests. AMD rates it CVSS 4.0 7.0. Fixed via OEM BIOS updates carrying new PI firmware.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:AMD EPYC 7003 Series affected PI firmware before MilanPI-SP3_1.0.0.J fixed MilanPI-SP3_1.0.0.J
- vendor:AMD EPYC 9004 Series affected PI firmware before GenoaPI_1.0.0.H fixed GenoaPI_1.0.0.H
- vendor:AMD EPYC Embedded 7003 Series affected PI firmware before EmbMilanPI-SP3 1.0.0.D fixed EmbMilanPI-SP3 1.0.0.D
- vendor:AMD EPYC Embedded 9004 Series affected PI firmware before EmbGenoaPI-SP5 1.0.0.D fixed EmbGenoaPI-SP5 1.0.0.D

## How to check

Check whether servers use AMD EPYC 7003 (Milan), 9004 (Genoa) or Embedded 7003/9004 CPUs (lscpu), then compare the BIOS/AGESA PI version (dmidecode -t bios, or the OEM's BIOS release notes) against the fixed PI versions. Risk matters mainly where untrusted guest VMs run with PCIe passthrough or devices lacking ATC support.

## Fix

Update BIOS from your OEM that includes AMD PI firmware: EPYC 7003 MilanPI-SP3_1.0.0.J or later; EPYC 9004 GenoaPI_1.0.0.H or later; EPYC Embedded 7003 EmbMilanPI-SP3 1.0.0.D; EPYC Embedded 9004 EmbGenoaPI-SP5 1.0.0.D. Fixed in AMD PI releases to OEMs 2025-12-02 to 2026-02-02; bulletin AMD-SB-3052.

## Timeline

- 2026-11-12T19:40:12+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-21954
- 2026-11-12T19:41:40+00:00 analyst https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3052.html — Read AMD-SB-3052 (AMD's own bulletin); affected: EPYC 7003, 9004, Embedded 7003, Embedded 9004 with PI firmware fixes listed. No exploitation or PoC found; no social search done (low-noise B-tier).

## Documents

- [advisory] AMD-SB-3052 IOMMU Improper Exception Handling and SMM OOB Write https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3052.html

## From the sources

Improper exception handling in IOMMU could allow an invalidate command to be sent to PCIe devices that do not support Address Translation Cache (ATC), potentially resulting in denial of service.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_