Към съдържанието
Търсене

CVE-2024-36315: AMD EPYC™ Series 9004 Processors, логическа грешка

5.7

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, при специфични условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.

Засегнати продукти

  • AMD AMD EPYC™ Series 9004 Processors: GenoaPI_1.0.0.E
  • AMD AMD EPYC™Series 4004 Processors: ComboAM5PI_1.0.0.a/ ComboAM5PI_1.1.0.3c/ ComboAM5PI_1.2.0.3
  • AMD AMD EPYC™ 8004 Series Processors: GenoaPI_1.0.0.E
  • AMD AMD Instinct™ MI300A Series Processors: MI300PI 1.0.0.7
  • AMD AMD Ryzen™ Z1 Series Processors: ComboAM5PI_1.2.0.3; ComboAM5PI_1.1.0.3c; ComboAM5PI_1.0.0.a
  • AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: PhoenixPI-FP8-FP7_1.2.0.0
  • AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics: DragonRangeFL1_1.0.0.3g
  • AMD AMD Ryzen™ 9000 Series Desktop Processors: ComboAM5PI_1.2.0.3
  • AMD AMD Ryzen™ 7000 Series Desktop Processors: ComboAM5PI_1.0.0.a; ComboAM5PI_1.1.0.3c; ComboAM5PI_1.2.0.3
  • AMD AMD Ryzen™ 8000 Series Desktop Processors: ComboAM5PI_1.1.0.3c; ComboAM5PI_1.2.0.3
  • AMD AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"): ComboAM5PI_1.3.0.0
  • AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): ComboAM5PI_1.3.0.0
  • AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"): EmbGenoaPI-SP5 1.0.0.D
  • AMD AMD EPYC™ Embedded 8004 Series Processors: EmbGenoaPI-SP5 1.0.0.D
  • AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"): EmbGenoaPI-SP5 1.0.0.D
  • AMD AMD Ryzen™ Embedded 8000 Series Processors: EmbeddedPhoenixPI-FP7r2_1.0.0.3
  • AMD AMD Ryzen™ Embedded 7000 Series Processors: EmbeddedAM5PI 1.0.0.5

Вид слабост

История

  • 13 май 2026 Публикувано

Други уязвимости в AMD AMD EPYC™ Series 9004 Processors

Първоизточници

CVE-2024-36315: AMD EPYC™ Series 9004 Processors, логическа грешка | freedomonline.bg