CVE-2024-2193: medium-severity vulnerability in AMD CPU
Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.7epss 1.3%
A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Related CVEs — AMD CPU
In the same product, most dangerous first.
CVE-2024-31142HIGHx86: Incorrect logic for BTC/SRSO mitigationsEPSS 17.4%CVE-2024-2201MEDIUMCVE-2024-2201EPSS 8.8%CVE-2023-46842MEDIUMx86 HVM hypercalls may trigger Xen bug checkEPSS 8.5%CVE-2025-1713HIGHdeadlock potential with VT-d and legacy PCI device pass-throughEPSS 0.9%CVE-2023-46839MEDIUMpci: phantom functions assigned to incorrect contextsEPSS 0.8%CVE-2025-27465MEDIUMx86: Incorrect stubs exception handling for flags recoveryEPSS 0.7%
References
https://download.vusec.net/papers/ghostrace_sec24.pdfhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=944d5fe50f3f03daacfea16300e656a1691c4a23https://ibm.github.io/system-security-research-updates/2024/03/12/ghostracehttps://kb.cert.org/vuls/id/488902https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7016.htmlhttps://www.kb.cert.org/vuls/id/488902https://www.vusec.net/projects/ghostrace/https://xenbits.xen.org/xsa/advisory-453.htmlhttp://www.openwall.com/lists/oss-security/2024/03/12/14