Vulnerability in AMD Epyc™ 8004 Series Processors
CVE-2024-36315
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (2.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 3rd percentile — 2.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- AMD Epyc™ 8004 Series Processors — versions GenoaPI_1.0.0.E
- AMD Epyc™ Embedded 8004 Series Processors — versions EmbGenoaPI-SP5 1.0.0.D
- AMD Epyc™ Embedded 9004 Series Processors (Formerly Codenamed "Bergamo") — versions EmbGenoaPI-SP5 1.0.0.D
- AMD Epyc™ Embedded 9004 Series Processors (Formerly Codenamed "Genoa") — versions EmbGenoaPI-SP5 1.0.0.D
- AMD Epyc™series 4004 Processors — versions ComboAM5PI_1.0.0.a/ ComboAM5PI_1.1.0.3c/ ComboAM5PI_1.2.0.3
- AMD Epyc™ Series 9004 Processors — versions GenoaPI_1.0.0.E
- AMD Instinct™ Mi300a Series Processors — versions MI300PI 1.0.0.7
- AMD Ryzen™ 7000 Series Desktop Processors — versions ComboAM5PI_1.0.0.a, ComboAM5PI_1.1.0.3c, ComboAM5PI_1.2.0.3
- AMD Ryzen™ 7000 Series Desktop Processors (Formerly Codenamed "Raphael") — versions ComboAM5PI_1.3.0.0
- AMD Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics — versions PhoenixPI-FP8-FP7_1.2.0.0