CVE-2024-36350

Aliases:UBUNTU-CVE-2024-36350DEBIAN-CVE-2024-36350ALPINE-CVE-2024-36350
Advisory lineage Upstream: 0 Downstream: 56
Deferred
Published: 08 Jul 2025, 16:56
Last modified:04 Nov 2025, 21:08

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.6 MEDIUM
v3.1 (cve.org)
EPSS Score
0.48% LOW
0% probability +0.46%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Jul 2025, 16:56
Published
Vulnerability first disclosed
04 Nov 2025, 21:08
Last Modified
Vulnerability information updated

Description

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Trends

Current EPSS score: 0.48%• Percentile: 40%

Techniques & Countermeasures

  • CWE-1421•Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

    A processor event may allow transient operations to access architecturally restricted data (for example, in another address space) in a shared microarchitectural structure (for example, a CPU cache), potentially exposing the data over a covert channel.

Affected Systems

  • alpine•xen

    < 4.18.5-r1 | < 4.18.5-r1 | < 4.19.2-r2 | < 4.20.1-r0 | < 4.20.1-r0 | < 4.20.1-r0

  • debian•amd64-microcode

    all | all | all | < 3.20251202.1

  • debian•linux

    < 5.10.244-1 | < 6.1.147-1 | < 6.12.37-1 | < 6.12.37-1

  • debian•linux-6.1

    < 6.1.153-1~deb11u1

  • debian•xen

    all | < 4.17.5+72-g01140da4e8-1 | < 4.20.2+7-g1badcf5035-0+deb13u1 | < 4.20.2+7-g1badcf5035-1

  • ubuntu•amd64-microcode

    all | all | all | all | < 3.20251202.1ubuntu0.24.04.1 | < 3.20251202.1ubuntu0.25.10.1 | < 3.20251202.1ubuntu1

  • ubuntu•linux

    all | all | < 6.8.0-100.100

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    all | all | < 6.8.0-1046.49

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    all

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    all

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.14

    < 6.14.0-1015.15~24.04.1

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-6.5

    all

  • ubuntu•linux-aws-6.8

    < 6.8.0-1046.49~22.04.1

  • ubuntu•linux-aws-fips

    all | < 6.8.0-1046.49+fips1

  • ubuntu•linux-aws-hwe

    all

  • ubuntu•linux-azure

    all | all | all | < 6.8.0-1046.52

  • ubuntu•linux-azure-4.15

    all

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    all

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    all

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.11

    all

  • ubuntu•linux-azure-6.14

    < 6.14.0-1014.14~24.04.1

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-6.5

    all

  • ubuntu•linux-azure-6.8

    < 6.8.0-1051.57~22.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all | all | all | all

  • ubuntu•linux-azure-fde-5.15

    all

  • ubuntu•linux-azure-fde-5.19

    all

  • ubuntu•linux-azure-fde-6.2

    all

  • ubuntu•linux-azure-fde-6.8

    all

  • ubuntu•linux-azure-fips

    all | < 6.8.0-1046.52+fips1

  • ubuntu•linux-azure-nvidia

    all

  • ubuntu•linux-azure-nvidia-6.14

    < 6.14.0-1007.7

  • ubuntu•linux-bluefield

    all | all | < 6.8.0-1016.20

  • ubuntu•linux-fips

    all | < 6.8.0-100.100+fips1

  • ubuntu•linux-gcp

    all | all | all | < 6.8.0-1047.50

  • ubuntu•linux-gcp-4.15

    all

Showing first 50 affected entries in server-rendered view.

References (38)