CVE-2024-36357
MEDIUM 5.6 ALL-YEARSA transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.
LIMITED SIGNALS
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.4%chance of exploitation in 30 days · 29th percentile
○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no
Impact if exploited
5.6CVSS 3.1 · MEDIUM · CNA
- ConfidentialityHigh
- IntegrityNone
- AvailabilityNone
What an attacker needs
- ⚠Access: Requires local access to the host
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ⚠Complexity: Needs a race window or specific setup
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Affected
Vendors Amd
Products Amd Epyc™ 7003 Series Processors Amd Epyc™ 9004 Series Processors Amd Epyc™ 8004 Series Processors Amd Epyc™ 9v64h Processor Amd Ryzen™ 5000 Series Desktop Processors Amd Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics Amd Ryzen™ 7000 Series Desktop Processors Amd Ryzen™ 8000 Series Processor With Radeon™ Graphics Amd Ryzen™ Threadripper™ Pro 7000 Wx Series Processors Amd Ryzen™ 6000 Series Processor With Radeon™ Graphics Amd Ryzen™ 7035 Series Processor With Radeon™ Graphics Amd Ryzen™ 7000 Series Processors With Radeon™ Graphics Amd Ryzen™ 7040 Series Processors With Radeon™ Graphics Amd Ryzen™ 8040 Series Mobile Processors With Radeon™ Graphics Amd Ryzen™ 7000 Series Mobile Processors Amd Epyc™ Embedded 7003 Series Processors Amd Epyc™ Embedded 8004 Series Processors Amd Epyc™ Embedded 9004 Series Processors Amd Ryzen™ Embedded 5000 Series Processors Amd Ryzen™ Embedded 7000 Series Processors Amd Ryzen™ Embedded V3000 Series Processors Amd Epyc™ Embedded 97x4 Amd Ryzen™ 5000 Series Processors With Radeon™ Graphics
Weakness (CWE)
- CWE-1421: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
References and research data (JSON)
Vendor product assessments
Showing 32 of 1071 vendor product statements; 1039 omitted. Read the full vendor advisory.
kernel-64k-debug-debuginfo-0:6.12.0-124.8.1.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_1?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
python3-perf-0:6.12.0-124.8.1.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_1?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
libperf-debuginfo-0:5.14.0-570.62.1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-rt-64k-debug-debuginfo-0:5.14.0-611.5.1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_7?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-core-0:6.12.0-124.8.1.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_1?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-tools-debuginfo-0:6.12.0-124.8.1.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_1?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-debug-0:5.14.0-570.62.1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-uki-virt-addons-0:5.14.0-570.62.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-debug-modules-core-0:5.14.0-611.5.1.el9_7.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_7?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
python3-perf-debuginfo-0:5.14.0-611.5.1.el9_7.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_7?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-rt-64k-debuginfo-0:5.14.0-570.62.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
libperf-debuginfo-0:5.14.0-611.5.1.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_7?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-rt-debug-debuginfo-0:5.14.0-611.5.1.el9_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_7?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
kernel-rt-modules-extra-0:6.12.0-124.8.1.el10_1.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_1?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
libperf-debuginfo-0:5.14.0-570.62.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
python3-perf-debuginfo-0:5.14.0-611.5.1.el9_7.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_7?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
amd-gpu-firmware as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/amd-gpu-firmware
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
iwlegacy-firmware as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/iwlegacy-firmware
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
netronome-firmware as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/netronome-firmware
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
kernel-debug as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
perf as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/perf
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-doc as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-doc
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-doc
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel.src as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-debug as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-ipaclones-internal
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-kvm
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-selftests-internal as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-selftests-internal
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-zfcpdump-modules
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-rt-debug-core as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-core
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
kernel-rt-devel as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-devel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
kernel-rt.src as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
All CVSS metrics
- MEDIUM 5.6 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N - MEDIUM 5.6 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
References
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-36357.json Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54760 EUVD · EUVD-2024-54760
Technical & other
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html CVE record · AMD · Updated 2025-07-08T17:01:48.957Z
NVD · CVE-2024-36357 · Updated 2026-06-17T07:36:34.060
Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00 - https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlCVE record · CVE · Updated 2025-11-04T21:08:40.807Z
NVD · CVE-2024-36357 · Updated 2026-06-17T07:36:34.060 - https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlCVE record · CVE · Updated 2025-11-04T21:08:40.807Z
NVD · CVE-2024-36357 · Updated 2026-06-17T07:36:34.060 - http://xenbits.xen.org/xsa/advisory-471.htmlCVE record · CVE · Updated 2025-11-04T21:08:40.807Z
NVD · CVE-2024-36357 · Updated 2026-06-17T07:36:34.060 - http://www.openwall.com/lists/oss-security/2025/08/28/2CVE record · CVE · Updated 2025-11-04T21:08:40.807Z
NVD · CVE-2024-36357 · Updated 2026-06-17T07:36:34.060 - https://access.redhat.com/security/cve/CVE-2024-36357 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2350726 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://www.cve.org/CVERecord?id=CVE-2024-36357 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2024-36357 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://access.redhat.com/errata/RHSA-2025:20095 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://access.redhat.com/errata/RHSA-2025:19930 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://access.redhat.com/errata/RHSA-2025:20518 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
- https://access.redhat.com/errata/RHBA-2025:15878 Red Hat · CVE-2024-36357 · Updated 2026-10-16T22:55:02+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS