VDB

CISA-2024-2201

CISA-2024-2201 PUBLISHED CVSS 4.7 MEDIUM

Reported by certcc · Published December 19, 2024

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

Risk Scores

CVSS 3.1
4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
XenXenSee advisory "x86: Native Branch History Injection"
XenXenSee advisory "x86: Native Branch History Injection", *

Timeline

  • Dec 19, 2024 CVE Published
  • Jan 9, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›