VDB
ALPINE-CVE-2024-2201
ALPINE-CVE-2024-2201
PUBLISHED
CVSS 4.699999809265137 MEDIUM
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.18 | xen | 0, 4.9.1-r3, 4.9.1-r2 |
| Alpine:v3.23 | xen | 4.15.0-r4, 4.15.0-r2, 4.15.0-r1 |
| Alpine:v3.21 | xen | 4.15.0-r0, 4.14.1-r5, 4.14.1-r4 |
| Alpine:v3.22 | xen | 4.5.1-r1, 0, 4.0.1-r0 |
| Alpine:v3.20 | xen | 0, 4.13.1-r5, 4.1.2-r9 |
| Alpine:v3.16 | xen | 4.2.1-r5, 4.1.2-r3, 4.1.2-r11 |
| Alpine:v3.24 | xen | 0 |
| Alpine:v3.17 | xen | 4.15.1-r1, 0, 4.9.1-r3 |
| Alpine:v3.19 | xen | 4.11.1-r1, 4.11.1-r0, 4.11.0-r1 |
Timeline
- Dec 19, 2024 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated