CVE-2024-21977CWE-459

Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting…

Low · published September 5, 2025

CVSS v3.1
3.2
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2025-09-05T12:58Z
EPSS history
Timeline
  • 05 SEP 12:58Z
    Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting…
    cvelistv5