Riskcovery

CVE-2024-36315

State
Published
Severity
5.7 Medium
Published
May 13, 2026
Updated
May 13, 2026
Reserved
May 23, 2024

Read the record on cve.org

Description

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.

Scores

CVSSScoreVectorSource
4.05.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NAMD

Weaknesses

  • CWE-693 Protection Mechanism Failure

Affected Products

ProductVersions
AMD EPYC™ Series 9004 ProcessorsAMD
  • GenoaPI_1.0.0.ENot affected
AMD EPYC™Series 4004 ProcessorsAMD
  • ComboAM5PI_1.0.0.a/ ComboAM5PI_1.1.0.3c/ ComboAM5PI_1.2.0.3Not affected
AMD EPYC™ 8004 Series ProcessorsAMD
  • GenoaPI_1.0.0.ENot affected
AMD Instinct™ MI300A Series ProcessorsAMD
  • MI300PI 1.0.0.7Not affected
AMD Ryzen™ Z1 Series ProcessorsAMD
  • ComboAM5PI_1.2.0.3Not affected
  • ComboAM5PI_1.1.0.3cNot affected
  • ComboAM5PI_1.0.0.aNot affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0Not affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD
  • DragonRangeFL1_1.0.0.3gNot affected
AMD Ryzen™ 9000 Series Desktop ProcessorsAMD
  • ComboAM5PI_1.2.0.3Not affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5PI_1.0.0.aNot affected
  • ComboAM5PI_1.1.0.3cNot affected
  • ComboAM5PI_1.2.0.3Not affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • ComboAM5PI_1.1.0.3cNot affected
  • ComboAM5PI_1.2.0.3Not affected
AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael")AMD
  • ComboAM5PI_1.3.0.0Not affected
AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")AMD
  • ComboAM5PI_1.3.0.0Not affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")AMD
  • EmbGenoaPI-SP5 1.0.0.DNot affected
AMD EPYC™ Embedded 8004 Series ProcessorsAMD
  • EmbGenoaPI-SP5 1.0.0.DNot affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")AMD
  • EmbGenoaPI-SP5 1.0.0.DNot affected
AMD Ryzen™ Embedded 8000 Series ProcessorsAMD
  • EmbeddedPhoenixPI-FP7r2_1.0.0.3Not affected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD
  • EmbeddedAM5PI 1.0.0.5Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.