7.5

CVE-2024-31142: x86: Incorrect logic for BTC/SRSO mitigations

Analyzed
AliasesALPINE-CVE-2024-31142UBUNTU-CVE-2024-31142DEBIAN-CVE-2024-31142
Published 16-05-2024Last modified 04-11-2025

Vulnerability summary

CVE-2024-31142 is a high (CVSS 7.5) Protection Mechanism Failure vulnerability in fedoraproject fedora. EPSS estimates a 17.44% chance of exploitation in the next 30 days, higher than 97.1% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
17.44%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 6
DSA-5836-1OPENSUSE-SU-2024:13853-1SUSE-SU-2024:1259-1SUSE-SU-2024:1295-1SUSE-SU-2024:1540-1SUSE-SU-2024:1541-1

Timeline

  1. 16-05-2024
    PublishedVulnerability first disclosed.
  2. 04-11-2025
    Last modifiedVulnerability information updated.

Description

Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used. XSA-434 (Speculative Return Stack Overflow) uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html https://xenbits.xen.org/xsa/advisory-434.html

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

17.44%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 17.44% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Alpine1 product
  • xen≥ 4.16.0, < 4.16.6-r0 | ≥ 4.16.0, < 4.17.4-r0 | ≥ 4.16.0, < 4.18.2-r0
Debian1 product
  • xen< 4.17.5+23-ga4e5191dc0-1 | < 4.19.1-1
Fedoraproject1 product
Ubuntu1 product
  • xenAll versions (No fix recorded)
Xen1 product
  • xen< 4.15.6 | ≥ 4.16.0, < 4.16.6 | ≥ 4.17.0, < 4.17.4 | ≥ 4.18.0, < 4.18.2

5 vendors · 5 products

References

9 links