AMD RAID Driver Improper Input Validation Enables Privilege Escalation
CVE-2024-21962 Published on May 15, 2026

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

NVD

Weakness Type

Insufficient Granularity of Access Control

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

Affected Versions

AMD EPYC™ 4005 Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD EPYC™ 4004 Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ Threadripper™ 7000 WX-Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 9000HX Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 3000 Series Desktop Processors:

Version No fix planned is unaffected.

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ 5000 Series Desktop Processors:

Version No fix planned is unaffected.

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ Z2 Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ AI 300 Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics:

Version No fix planned is unaffected.

AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ AI Max 300 Series Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ Threadripper™ 9000 Series:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 2000 Mobile Processors:

Version No fix planned is unaffected.

AMD Ryzen™ 4000 Series Desktop Processors:

Version No fix planned is unaffected.

AMD Ryzen™ 7000 Series Desktop Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 8000 Series Desktop Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD Ryzen™ 9000 Series Desktop Processors:

Version AMD RAID Software: 9.3.3.245 is unaffected.

AMD EPYC™ Embedded 4005 Series Processors:

Version Embedded EPYC_4005 Windows RAID Driver - 9.3.3.00245 - (71794) is unaffected.

AMD RAID Driver Improper Input Validation Enables Privilege EscalationCVE-2024-21962 Published on May 15, 2026

Weakness Type

Insufficient Granularity of Access Control

Affected Versions

AMD RAID Driver Improper Input Validation Enables Privilege Escalation
CVE-2024-21962 Published on May 15, 2026