CVE-2024-21963 · Infrastructure
NO FIX YET
An out-of-bounds read in the IOMMU lets a malicious guest virtual machine corrupt hypervisor memory pages. The result can be a host crash, which takes down availability for everything running on that machine.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Affects hosts that run virtual machines and use the IOMMU for device passthrough, where a guest can act maliciously. The sources do not name the affected hypervisor products or versions. Systems that run no hypervisor or no untrusted guests are unlikely to be exposed.
Not affected if no-untrusted-guests
Who cares hypervisor, iommu, virtualization
Unknown from the sources.
No fix yet, per the sources.
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a host crash leading to loss of availability.
This page as .md · .json · CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.