CVE-2024-21977
LOW
INFO
Priority: 0.01
BB Relevance:
26/100
Published: 2025-09-05
Modified: 2026-11-09
First seen: 2026-11-09
Status: active
Attack Surface
Low Complexity
No Interaction
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
None
S:
Changed
C:
None
I:
Low
A:
None
Description
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests.