CVE-2024-36357

MEDIUM5.6

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries

Published Jul 8, 2025

Modified 2 months ago

No fix available

Details

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

References

WEBhttp://www.openwall.com/lists/oss-security/2025/08/28/2 WEBhttp://xenbits.xen.org/xsa/advisory-471.html WEBhttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html WEBhttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html WEBhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-36357

CVSS Analysis

CVSS v3.1

5.6

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness Type (CWE)

Other

CWE-1421

Ecosystems

Timeline

PublishedJul 8, 2025

ModifiedNov 4, 2025