CVE-2024-36315: vulnerability facts

CVE-2024-36315

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.

CVSS 5.7 · Medium · EPSS 0.1% · Fix available

Published: 2026-05-13T03:07:34.076Z
Updated: 2026-05-13T14:36:26.409Z

Stack: system

Affected products and versions

amd epyc™ series 9004 processors
Versions
- GenoaPI_1.0.0.E: Not affected
No fix published
amd epyc™series 4004 processors
Versions
- ComboAM5PI_1.0.0.a/ ComboAM5PI_1.1.0.3c/ ComboAM5PI_1.2.0.3: Not affected
No fix published
amd epyc™ 8004 series processors
Versions
- GenoaPI_1.0.0.E: Not affected
No fix published
amd instinct™ mi300a series processors
Versions
- MI300PI 1.0.0.7: Not affected
No fix published
amd ryzen™ z1 series processors
Versions
- ComboAM5PI_1.2.0.3: Not affected
- ComboAM5PI_1.1.0.3c: Not affected
- ComboAM5PI_1.0.0.a: Not affected
No fix published
amd ryzen™ 7040 series mobile processors with radeon™ graphics
Versions
- PhoenixPI-FP8-FP7_1.2.0.0: Not affected
No fix published
amd ryzen™ 7045 series mobile processors with radeon™ graphics
Versions
- DragonRangeFL1_1.0.0.3g: Not affected
No fix published
amd ryzen™ 9000 series desktop processors
Versions
- ComboAM5PI_1.2.0.3: Not affected
No fix published
amd ryzen™ 7000 series desktop processors
Versions
- ComboAM5PI_1.0.0.a: Not affected
- ComboAM5PI_1.1.0.3c: Not affected
- ComboAM5PI_1.2.0.3: Not affected
No fix published
amd ryzen™ 8000 series desktop processors
Versions
- ComboAM5PI_1.1.0.3c: Not affected
- ComboAM5PI_1.2.0.3: Not affected
No fix published
amd ryzen™ 7000 series desktop processors (formerly codenamed "raphael")
Versions
- ComboAM5PI_1.3.0.0: Not affected
No fix published
amd ryzen™ 8000 series desktop processors (formerly codenamed "phoenix")
Versions
- ComboAM5PI_1.3.0.0: Not affected
No fix published
amd epyc™ embedded 9004 series processors (formerly codenamed "genoa")
Versions
- EmbGenoaPI-SP5 1.0.0.D: Not affected
No fix published
amd epyc™ embedded 8004 series processors
Versions
- EmbGenoaPI-SP5 1.0.0.D: Not affected
No fix published
amd epyc™ embedded 9004 series processors (formerly codenamed "bergamo")
Versions
- EmbGenoaPI-SP5 1.0.0.D: Not affected
No fix published
amd ryzen™ embedded 8000 series processors
Versions
- EmbeddedPhoenixPI-FP7r2_1.0.0.3: Not affected
No fix published
amd ryzen™ embedded 7000 series processors
Versions
- EmbeddedAM5PI 1.0.0.5: Not affected
No fix published
amd64-microcode Ubuntu:14.04:LTS
Versions
- 1.20120910-3
- 2.20131007.1+really20130710.1
- 3.20180524.1~ubuntu0.14.04.1
- 3.20180524.1~ubuntu0.14.04.2+really20130710.1
- 3.20180524.1~ubuntu0.14.04.2+really20130710.1ubuntu1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:Pro:16.04:LTS
Versions
- 2.20141028.1
- 2.20160316.1
- 3.20180524.1~ubuntu0.16.04.1
- 3.20180524.1~ubuntu0.16.04.2
- 3.20191021.1ubuntu0.16.04.1
- 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2
- 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1
- 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm2
- 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm3
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:Pro:18.04:LTS
Versions
- 3.20160316.3
- 3.20171205.1
- 3.20180524.1~ubuntu0.18.04.1
- 3.20180524.1~ubuntu0.18.04.2
- 3.20191021.1ubuntu0.18.04.2
- 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1
- 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1
- 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm2
- 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:20.04:LTS
Versions
- 3.20181128.1ubuntu2
- 3.20191021.1ubuntu1
- 3.20191218.1ubuntu1
- 3.20191218.1ubuntu1.1
- 3.20191218.1ubuntu1.2
- 3.20191218.1ubuntu1.3
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:22.04:LTS
Versions
- 3.20191218.1ubuntu2
- 3.20191218.1ubuntu2.1
- 3.20191218.1ubuntu2.2
- 3.20191218.1ubuntu2.3
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:24.04:LTS
Versions
- 3.20230808.1.1ubuntu1
- 3.20231019.1ubuntu1
- 3.20231019.1ubuntu2
- 3.20231019.1ubuntu2.1
- 3.20250311.1ubuntu0.24.04.1
Affected ranges
- ECOSYSTEM: < 3.20251202.1ubuntu0.24.04.1
Update to 3.20251202.1ubuntu0.24.04.1
amd64-microcode Ubuntu:25.10
Versions
- 3.20240820.1ubuntu1
- 3.20250311.1ubuntu1
- 3.20250708.1ubuntu1
Affected ranges
- ECOSYSTEM: < 3.20251202.1ubuntu0.25.10.1
Update to 3.20251202.1ubuntu0.25.10.1

Original sources

Check your server →

CVE-2024-36315

Affected products and versions

amd64-microcode Ubuntu:14.04:LTS

amd64-microcode Ubuntu:Pro:16.04:LTS

amd64-microcode Ubuntu:Pro:18.04:LTS

amd64-microcode Ubuntu:20.04:LTS

amd64-microcode Ubuntu:22.04:LTS

amd64-microcode Ubuntu:24.04:LTS

amd64-microcode Ubuntu:25.10

Original sources