CVE-2024-21962CWE-1220

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation…

High · published May 15, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00106 · 1.0th percentile
Weakness
CWE-1220 · Insufficient Granularity of Access Control
Published
2026-05-15T01:59Z
EPSS history
Timeline
  • 15 MAY 01:59Z
    Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation…
    cvelistv5