Speculative Leaks
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 11%
exploitation probability
11%top 4% of all CVEs
observed exploitation
nono source reports it
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
Affected products
AMD · Athlon™ 3000 Series Processors with Radeon™ GraphicsAMD · Athlon™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD · EPYC™ 7001 ProcessorsAMD · Ryzen™ 3000 Series Processors with Radeon™ GraphicsAMD · Ryzen™ PRO 3000 Series Processors with Radeon™ Vega GraphicsReferences
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/https://security.netapp.com/advisory/ntap-20240531-0005/https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007https://www.debian.org/security/2023/dsa-5480https://www.debian.org/security/2023/dsa-5492http://www.openwall.com/lists/oss-security/2023/09/25/3http://www.openwall.com/lists/oss-security/2023/09/25/4http://www.openwall.com/lists/oss-security/2023/09/25/5http://www.openwall.com/lists/oss-security/2023/09/25/7