Skip to content
Sign in
CVE-2024-363575.6Medium

CVE-2024-36357: AMD EPYC™ 7003 Series Processors vulnerability

AMD · AMD EPYC™ 7003 Series Processors

Fixed in RHEL 9/10, Debian 12/13, Alpine 3.22/3.23/3.24 · Affected: AMD EPYC™ 7003 Series Processors · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check
0.4%probability of exploitation in the next 30 days
29th percentile
050100

Higher than 29% of scored CVEs

5.6MediumCVSS
LowMedium

DescriptionNVD

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Fix status by distribution

From each distribution’s security tracker. Distributions we did not check are not listed.

What changed

Alpine status tracked since 12 Nov 2026. Debian status tracked since 12 Nov 2026. Red Hat status tracked since 12 Nov 2026. Ubuntu status tracked since 12 Nov 2026.

  1. Seen in Alpine’s tracker on 12 Nov: Alpine 3.19 fixed in xen-4.18.5-r1 Alpine
  2. Seen in Alpine’s tracker on 12 Nov: Alpine 3.20 fixed in xen-4.18.5-r1 Alpine
  3. Seen in Alpine’s tracker on 12 Nov: Alpine 3.21 fixed in xen-4.19.6-r4 Alpine
  4. Seen in Alpine’s tracker on 12 Nov: Alpine 3.22 fixed in xen-4.20.4-r4 Alpine
  5. Seen in Alpine’s tracker on 12 Nov: Alpine 3.23 fixed in xen-4.20.4-r4 Alpine
  6. Seen in Alpine’s tracker on 12 Nov: Alpine 3.24 fixed in xen-4.21.2-r4 Alpine
  7. Seen in Debian’s tracker on 12 Nov: Debian 12 fixed Debian
  8. Seen in Debian’s tracker on 12 Nov: Debian 13 fixed Debian
  9. Seen in Red Hat’s tracker on 12 Nov: RHEL 10 fixed Red Hat
  10. Seen in Red Hat’s tracker on 12 Nov: RHEL 9 fixed Red Hat
  11. Ubuntu’s tracker lists Ubuntu stonking as under investigation Ubuntu

Coverage1 article · 1 outlet

First in our coverage: The Hacker News, 12 Nov.

  1. Google warns of AMD Turin CPU flaws that could leak data
    The Hacker News · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in