Skip to content
Fencer Vulns
medium 5.6

CVE-2024-36350 json

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting…

published 2025-07-08 16 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-54759

cvss
5.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 42%
public exploits
0
none known

Summary

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

Patch / fix

  • AMD AMD EPYC™ 7003 Series Processors MilanPI 1.0.0.G + OS Updates
  • AMD AMD EPYC™ 9004 Series Processors GenoaPI 1.0.0.E + OS Updates
  • AMD AMD EPYC™ 8004 Series Processors GenoaPI 1.0.0.E + OS Updates
  • AMD AMD EPYC™ 9V64H Processor MI300PI 1.0.0.7 + OS Updates
  • AMD AMD Ryzen™ 5000 Series Desktop Processors ComboAM4v2PI 1.2.0.E + OS Updates
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics ComboAM4v2PI 1.2.0.E + OS Updates
  • AMD AMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.1.0.3c+ OS Updates, ComboAM5PI 1.0.0.a+ OS Updates, ComboAM5PI 1.2.0.3 + OS Updates
  • AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics ComboAM5PI 1.1.0.3c+ OS Updates, ComboAM5PI 1.2.0.3 + OS Updates
  • AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.0.0.1k + OS Updates, StormPeakPI-SP6 1.1.0.0i + OS Updates
  • AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.Bb + OS Updates
  • AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.Bb + OS Updates
  • AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.1.1b + OS Updates
  • AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
  • AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
  • AMD AMD Ryzen™ 7000 Series Mobile Processors DragonRangeFL1 1.0.0.3g + OS Updates
  • AMD AMD EPYC™ Embedded 7003 Series Processors EmbMilanPI-SP3 1.0.0.A + OS updates
  • AMD AMD EPYC™ Embedded 8004 Series Processors EmbGenoaPI-SP5 1.0.0.9 + OS updates
  • AMD AMD EPYC™ Embedded 9004 Series Processors EmbGenoaPI-SP5 1.0.0.9 + OS updates
  • AMD AMD Ryzen™ Embedded 5000 Series Processors EmbAM4PI 1.0.0.7 + OS Update
  • AMD AMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.3 + OS updates
  • AMD AMD Ryzen™ Embedded V3000 Series Processors Embedded-PI_FP7r2 100C + OS updates
  • AMD AMD EPYC™ Embedded 97X4 EmbGenoaPI-SP5 1.0.0.9 + OS updates
  • AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.1.1b + OS Updates
  • xen Debian 12 4.17.5+72-g01140da4e8-1
  • xen Debian 13 4.20.2+7-g1badcf5035-0+deb13u1
  • xen Debian 14 4.20.2+7-g1badcf5035-1
  • linux Debian 12 6.1.147-1
  • linux Debian 14, Debian 13 6.12.37-1
  • amd64-microcode Debian 14 3.20251202.1

debian advisories DEBIAN-CVE-2024-36350

  • linux Ubuntu 24.04 LTS 6.8.0-100.100
  • linux-aws Ubuntu 24.04 LTS 6.8.0-1046.49
  • linux-gcp Ubuntu 24.04 LTS 6.8.0-1047.50
  • linux-gke Ubuntu 24.04 LTS 6.8.0-1043.48
  • linux-ibm Ubuntu 24.04 LTS 6.8.0-1044.44
  • linux-azure Ubuntu 24.04 LTS 6.8.0-1046.52
  • linux-gkeop Ubuntu 24.04 LTS 6.8.0-1030.33
  • linux-raspi Ubuntu 24.04 LTS 6.8.0-1047.51

ubuntu advisories UBUNTU-CVE-2024-36350

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel RHEL 9 5.14.0-611.5.1.el9_7
  • rv RHEL 9 5.14.0-611.5.1.el9_7
  • perf RHEL 9 5.14.0-611.5.1.el9_7
  • rtla RHEL 9 5.14.0-611.5.1.el9_7
  • libperf RHEL 9 5.14.0-611.5.1.el9_7
  • kernel-rt RHEL 9 5.14.0-611.5.1.el9_7
  • kernel-64k RHEL 9 5.14.0-611.5.1.el9_7
  • kernel-core RHEL 9 5.14.0-611.5.1.el9_7

red hat advisories RHSA-2025:20518RHSA-2025:20095RHSA-2025:19930RHBA-2025:12877

  • kernel-64kb SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS, SLE High Performance Computing 15 SP4-ESPOS 5.14.21-150400.24.194.1
  • kernel-syms SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +1 more 5.14.21-150400.24.194.1
  • kernel-source SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +1 more 5.14.21-150400.24.194.1
  • kernel-default SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Micro 5.4 +5 more 5.14.21-150400.24.194.1
  • kernel-obs-build SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +1 more 5.14.21-150400.24.194.1
  • kernel-default-base SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Micro 5.4 +3 more 5.14.21-150400.24.194.1.150400.24.98.3
  • kernel-rt SLE Micro 5.4, SLE Micro 5.3 5.14.21-150400.15.142.1
  • kernel-source-rt SLE Micro 5.4, SLE Micro 5.3 5.14.21-150400.15.142.1

suse advisories SUSE-SU-2026:0617-1SUSE-SU-2026:0411-1SUSE-SU-2025:03023-1SUSE-SU-2025:03011-1SUSE-SU-2025:02997-1SUSE-SU-2025:02996-1

  • spectre-meltdown-checker openSUSE Tumbleweed 26.36.0602723-1.1
  • xen openSUSE Tumbleweed 4.20.1_04-1.1

opensuse advisories openSUSE-SU-2026:11242-1openSUSE-SU-2025:15547-1

  • kernel AlmaLinux 10 6.12.0-124.8.1.el10_1
  • rv AlmaLinux 10 6.12.0-124.8.1.el10_1
  • perf AlmaLinux 10 6.12.0-124.8.1.el10_1
  • rtla AlmaLinux 10 6.12.0-124.8.1.el10_1
  • libperf AlmaLinux 10 6.12.0-124.8.1.el10_1
  • kernel-rt AlmaLinux 10 6.12.0-124.8.1.el10_1
  • kernel-64k AlmaLinux 10 6.12.0-124.8.1.el10_1
  • kernel-core AlmaLinux 10 6.12.0-124.8.1.el10_1

almalinux advisories ALSA-2025:20095ALSA-2025:20518ALSA-2025:19930

  • kernel Rocky Linux 10 6.12.0-124.8.1.el10_1
  • kernel Rocky Linux 9 5.14.0-611.5.1.el9_7

rocky linux advisories RLSA-2025:20095RLSA-2025:20518

  • xen Alpine 3.20, Alpine 3.19 4.18.5-r1
  • xen Alpine 3.21 4.19.2-r2
  • xen Alpine 3.24, Alpine 3.23, Alpine 3.22 4.20.1-r0

alpine advisories ALPINE-CVE-2024-36350

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-36350 updated cvss 5.6

kernel: information leak via transient execution vulnerability in some AMD processors

  • Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux AppStream (v. 9) rv 5.14.0-611.5.1.el9_7, rv 5.14.0-570.62.1.el9_6, perf 5.14.0-611.5.1.el9_7, rtla 5.14.0-611.5.1.el9_7, perf 5.14.0-570.62.1.el9_6, rtla 5.14.0-570.62.1.el9_6, +20 more
    fixed: vendor fix RHSA-2025:19930
  • Red Hat Enterprise Linux AppStream (v. 10) rv 6.12.0-124.8.1.el10_1, perf 6.12.0-124.8.1.el10_1, rtla 6.12.0-124.8.1.el10_1, python3-perf 6.12.0-124.8.1.el10_1, amd-gpu-firmware 20250812-15.7.el10_0, intel-gpu-firmware 20250812-15.7.el10_0, +10 more
    fixed: vendor fix RHBA-2025:16447
  • Red Hat Enterprise Linux BaseOS (v. 9) kernel 5.14.0-611.5.1.el9_7, kernel 5.14.0-570.62.1.el9_6, kernel-64k 5.14.0-611.5.1.el9_7, kernel-64k 5.14.0-570.62.1.el9_6, kernel-core 5.14.0-611.5.1.el9_7, kernel-core 5.14.0-570.62.1.el9_6, +77 more
    fixed: vendor fix RHSA-2025:19930
  • Red Hat Enterprise Linux BaseOS (v. 10) kernel 6.12.0-124.8.1.el10_1, kernel-64k 6.12.0-124.8.1.el10_1, dvb-firmware 20250812-15.7.el10_0, kernel-core 6.12.0-124.8.1.el10_1, kernel-tools 6.12.0-124.8.1.el10_1, qcom-firmware 20250812-15.7.el10_0, +49 more
    fixed: vendor fix RHBA-2025:16447
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libperf 5.14.0-611.5.1.el9_7, libperf 5.14.0-570.62.1.el9_6, kernel-debuginfo-common-s390x 5.14.0-611.5.1.el9_7, kernel-debuginfo-common-s390x 5.14.0-570.62.1.el9_6, kernel-debuginfo-common-x86_64 5.14.0-611.5.1.el9_7, kernel-debuginfo-common-aarch64 5.14.0-611.5.1.el9_7, +4 more
    fixed: vendor fix RHSA-2025:19930
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libperf 6.12.0-124.8.1.el10_1, kernel-debuginfo-common-s390x 6.12.0-124.8.1.el10_1, kernel-debuginfo-common-x86_64 6.12.0-124.8.1.el10_1, kernel-debuginfo-common-aarch64 6.12.0-124.8.1.el10_1, kernel-debuginfo-common-ppc64le 6.12.0-124.8.1.el10_1
    fixed: vendor fix RHSA-2025:20095
  • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-611.5.1.el9_7, kernel-rt 5.14.0-570.62.1.el9_6, kernel-rt-64k 5.14.0-611.5.1.el9_7, kernel-rt-64k 5.14.0-570.62.1.el9_6, kernel-rt-core 5.14.0-611.5.1.el9_7, kernel-rt-core 5.14.0-570.62.1.el9_6, +34 more
    fixed: vendor fix RHSA-2025:19930
show 3 more
  • Red Hat Enterprise Linux Real Time (v. 10) kernel-rt 6.12.0-124.8.1.el10_1, kernel-rt-64k 6.12.0-124.8.1.el10_1, kernel-rt-core 6.12.0-124.8.1.el10_1, kernel-rt-modules 6.12.0-124.8.1.el10_1, kernel-rt-64k-core 6.12.0-124.8.1.el10_1, kernel-rt-debug-core 6.12.0-124.8.1.el10_1, +14 more
    fixed: vendor fix RHSA-2025:20095
  • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-611.5.1.el9_7, kernel-rt 5.14.0-570.62.1.el9_6, kernel-rt-core 5.14.0-611.5.1.el9_7, kernel-rt-kvm 5.14.0-570.62.1.el9_6, kernel-rt-core 5.14.0-570.62.1.el9_6, kernel-rt-modules 5.14.0-611.5.1.el9_7, +16 more
    fixed: vendor fix RHSA-2025:19930
  • Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt 6.12.0-124.8.1.el10_1, kernel-rt-core 6.12.0-124.8.1.el10_1, kernel-rt-modules 6.12.0-124.8.1.el10_1, kernel-rt-debug-core 6.12.0-124.8.1.el10_1, kernel-rt-modules-core 6.12.0-124.8.1.el10_1, kernel-rt-debug-modules 6.12.0-124.8.1.el10_1, +4 more
    fixed: vendor fix RHSA-2025:20095

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
16 mo ago

Exploit prediction

0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

  • AMD AMD EPYC™ 7003 Series Processors
  • AMD AMD EPYC™ 9004 Series Processors
  • AMD AMD EPYC™ 8004 Series Processors
  • AMD AMD EPYC™ 9V64H Processor
  • AMD AMD Ryzen™ 5000 Series Desktop Processors
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 7000 Series Desktop Processors
  • AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
  • AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
  • AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7000 Series Mobile Processors
  • AMD AMD EPYC™ Embedded 7003 Series Processors
  • AMD AMD EPYC™ Embedded 8004 Series Processors
  • AMD AMD EPYC™ Embedded 9004 Series Processors
  • AMD AMD Ryzen™ Embedded 5000 Series Processors
  • AMD AMD Ryzen™ Embedded 7000 Series Processors
  • AMD AMD Ryzen™ Embedded V3000 Series Processors
  • AMD AMD EPYC™ Embedded 97X4
  • AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Classification

Weakness
  • CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.