Read the docs
TI-2024-24149 Aliases CVE-2024-36357GHSA-76p2-wq47-mf7x

A transient execution vulnerability in some AMD processors may allow an attacker to infer…

Priority LOW 25CWE-1421Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 10 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00357 29th percentileScored 2026-11-07
Fix Partial AMD EPYC™ 7003 Series Processors (AMD): MilanPI 1.0.0.G + OS UpdatesAMD EPYC™ 9004 Series Processors (AMD): GenoaPI 1.0.0.E + OS Updates+21 more productsRed Hat: 3 advisoriesRed Hat: 10 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMDAMD EPYC™ 7003 Series Processors—MilanPI 1.0.0.G + OS UpdatesPatch availableCNA
AMDAMD EPYC™ 9004 Series Processors—GenoaPI 1.0.0.E + OS UpdatesPatch availableCNA
AMDAMD EPYC™ 8004 Series Processors—GenoaPI 1.0.0.E + OS UpdatesPatch availableCNA
AMDAMD EPYC™ 9V64H Processor—MI300PI 1.0.0.7 + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 5000 Series Desktop Processors—ComboAM4v2PI 1.2.0.E + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics—ComboAM4v2PI 1.2.0.E + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 7000 Series Desktop Processors—ComboAM5PI 1.2.0.3 + OS Updates, ComboAM5PI 1.0.0.a+ OS Updates, ComboAM5PI 1.1.0.3c+ OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 8000 Series Processor with Radeon™ Graphics—ComboAM5PI 1.2.0.3 + OS Updates, ComboAM5PI 1.1.0.3c+ OS UpdatesPatch availableCNA
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors—StormPeakPI-SP6 1.1.0.0i + OS Updates, StormPeakPI-SP6 1.0.0.1k + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ Graphics—RembrandtPI-FP7 1.0.0.Bb + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ Graphics—RembrandtPI-FP7 1.0.0.Bb + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 7000 Series Processors with Radeon™ Graphics—CezannePI-FP6 1.0.1.1b + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 7040 Series Processors with Radeon™ Graphics—PhoenixPI-FP8-FP7 1.2.0.0 + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics—PhoenixPI-FP8-FP7 1.2.0.0 + OS UpdatesPatch availableCNA
AMDAMD Ryzen™ 7000 Series Mobile Processors—DragonRangeFL1 1.0.0.3g + OS UpdatesPatch availableCNA
AMDAMD EPYC™ Embedded 7003 Series Processors—EmbMilanPI-SP3 1.0.0.A + OS updatesPatch availableCNA
AMDAMD EPYC™ Embedded 8004 Series Processors—EmbGenoaPI-SP5 1.0.0.9 + OS updatesPatch availableCNA
AMDAMD EPYC™ Embedded 9004 Series Processors—EmbGenoaPI-SP5 1.0.0.9 + OS updatesPatch availableCNA
AMDAMD Ryzen™ Embedded 5000 Series Processors—EmbAM4PI 1.0.0.7 + OS UpdatePatch availableCNA
AMDAMD Ryzen™ Embedded 7000 Series Processors—EmbeddedAM5PI 1.0.0.3 + OS updatesPatch availableCNA
AMDAMD Ryzen™ Embedded V3000 Series Processors—Embedded-PI_FP7r2 100C + OS updatesPatch availableCNA
AMDAMD EPYC™ Embedded 97X4—EmbGenoaPI-SP5 1.0.0.9 + OS updatesPatch availableCNA
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ Graphics—CezannePI-FP6 1.0.1.1b + OS UpdatesPatch availableCNA
  • AMD EPYC™ 7003 Series Processors VendorAMD Affected — Fixed in MilanPI 1.0.0.G + OS Updates Patch available CNA
  • AMD EPYC™ 9004 Series Processors VendorAMD Affected — Fixed in GenoaPI 1.0.0.E + OS Updates Patch available CNA
  • AMD EPYC™ 8004 Series Processors VendorAMD Affected — Fixed in GenoaPI 1.0.0.E + OS Updates Patch available CNA
  • AMD EPYC™ 9V64H Processor VendorAMD Affected — Fixed in MI300PI 1.0.0.7 + OS Updates Patch available CNA
  • AMD Ryzen™ 5000 Series Desktop Processors VendorAMD Affected — Fixed in ComboAM4v2PI 1.2.0.E + OS Updates Patch available CNA
  • AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM4v2PI 1.2.0.E + OS Updates Patch available CNA
  • AMD Ryzen™ 7000 Series Desktop Processors VendorAMD Affected — Fixed in ComboAM5PI 1.2.0.3 + OS Updates, ComboAM5PI 1.0.0.a+ OS Updates, ComboAM5PI 1.1.0.3c+ OS Updates Patch available CNA
  • AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM5PI 1.2.0.3 + OS Updates, ComboAM5PI 1.1.0.3c+ OS Updates Patch available CNA
  • AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors VendorAMD Affected — Fixed in StormPeakPI-SP6 1.1.0.0i + OS Updates, StormPeakPI-SP6 1.0.0.1k + OS Updates Patch available CNA
  • AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics VendorAMD Affected — Fixed in RembrandtPI-FP7 1.0.0.Bb + OS Updates Patch available CNA
  • AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics VendorAMD Affected — Fixed in RembrandtPI-FP7 1.0.0.Bb + OS Updates Patch available CNA
  • AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.1.1b + OS Updates Patch available CNA
  • AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates Patch available CNA
  • AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates Patch available CNA
  • AMD Ryzen™ 7000 Series Mobile Processors VendorAMD Affected — Fixed in DragonRangeFL1 1.0.0.3g + OS Updates Patch available CNA
  • AMD EPYC™ Embedded 7003 Series Processors VendorAMD Affected — Fixed in EmbMilanPI-SP3 1.0.0.A + OS updates Patch available CNA
  • AMD EPYC™ Embedded 8004 Series Processors VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.9 + OS updates Patch available CNA
  • AMD EPYC™ Embedded 9004 Series Processors VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.9 + OS updates Patch available CNA
  • AMD Ryzen™ Embedded 5000 Series Processors VendorAMD Affected — Fixed in EmbAM4PI 1.0.0.7 + OS Update Patch available CNA
  • AMD Ryzen™ Embedded 7000 Series Processors VendorAMD Affected — Fixed in EmbeddedAM5PI 1.0.0.3 + OS updates Patch available CNA
  • AMD Ryzen™ Embedded V3000 Series Processors VendorAMD Affected — Fixed in Embedded-PI_FP7r2 100C + OS updates Patch available CNA
  • AMD EPYC™ Embedded 97X4 VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.9 + OS updates Patch available CNA
  • AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.1.1b + OS Updates Patch available CNA

Remediation

  • Fix · CNA AMD EPYC™ 7003 Series Processors (AMD) Fixed in MilanPI 1.0.0.G + OS Updates
  • Fix · CNA AMD EPYC™ 9004 Series Processors (AMD) Fixed in GenoaPI 1.0.0.E + OS Updates
  • Fix · CNA AMD EPYC™ 8004 Series Processors (AMD) Fixed in GenoaPI 1.0.0.E + OS Updates
  • Fix · CNA AMD EPYC™ 9V64H Processor (AMD) Fixed in MI300PI 1.0.0.7 + OS Updates
  • Fix · CNA AMD Ryzen™ 5000 Series Desktop Processors (AMD) Fixed in ComboAM4v2PI 1.2.0.E + OS Updates
  • Fix · CNA AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics (AMD) Fixed in ComboAM4v2PI 1.2.0.E + OS Updates
  • Fix · CNA AMD Ryzen™ 7000 Series Desktop Processors (AMD) Fixed in ComboAM5PI 1.2.0.3 + OS Updates, ComboAM5PI 1.0.0.a+ OS Updates, ComboAM5PI 1.1.0.3c+ OS Updates
  • Fix · CNA AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics (AMD) Fixed in ComboAM5PI 1.2.0.3 + OS Updates, ComboAM5PI 1.1.0.3c+ OS Updates
  • Fix · CNA AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors (AMD) Fixed in StormPeakPI-SP6 1.1.0.0i + OS Updates, StormPeakPI-SP6 1.0.0.1k + OS Updates
  • Fix · CNA AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics (AMD) Fixed in RembrandtPI-FP7 1.0.0.Bb + OS Updates
  • Fix · CNA AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics (AMD) Fixed in RembrandtPI-FP7 1.0.0.Bb + OS Updates
  • Fix · CNA AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.1.1b + OS Updates
  • Fix · CNA AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics (AMD) Fixed in PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
  • Fix · CNA AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
  • Fix · CNA AMD Ryzen™ 7000 Series Mobile Processors (AMD) Fixed in DragonRangeFL1 1.0.0.3g + OS Updates
  • Fix · CNA AMD EPYC™ Embedded 7003 Series Processors (AMD) Fixed in EmbMilanPI-SP3 1.0.0.A + OS updates
  • Fix · CNA AMD EPYC™ Embedded 8004 Series Processors (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.9 + OS updates
  • Fix · CNA AMD EPYC™ Embedded 9004 Series Processors (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.9 + OS updates
  • Fix · CNA AMD Ryzen™ Embedded 5000 Series Processors (AMD) Fixed in EmbAM4PI 1.0.0.7 + OS Update
  • Fix · CNA AMD Ryzen™ Embedded 7000 Series Processors (AMD) Fixed in EmbeddedAM5PI 1.0.0.3 + OS updates
  • Fix · CNA AMD Ryzen™ Embedded V3000 Series Processors (AMD) Fixed in Embedded-PI_FP7r2 100C + OS updates
  • Fix · CNA AMD EPYC™ Embedded 97X4 (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.9 + OS updates
  • Fix · CNA AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.1.1b + OS Updates

Red Hat 3 advisories

  • RHSA-2025:20518 Released 2025-11-11 · Red Hat rating Moderate
    kernel security update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.5.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.5.1.el9_7, kernel-64k-devel-5.14.0-611.5.1.el9_7 +12
    • Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.5.1.el9_7, kernel-64k-5.14.0-611.5.1.el9_7, kernel-64k-core-5.14.0-611.5.1.el9_7 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.5.1.el9_7, libperf-5.14.0-611.5.1.el9_7
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.5.1.el9_7, kernel-rt-64k-5.14.0-611.5.1.el9_7, kernel-rt-64k-core-5.14.0-611.5.1.el9_7 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.5.1.el9_7, kernel-rt-core-5.14.0-611.5.1.el9_7, kernel-rt-debug-5.14.0-611.5.1.el9_7 +9
  • RHSA-2025:20095 Released 2025-11-11 · Red Hat rating Moderate
    kernel security update
    • Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.8.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.8.1.el10_1, kernel-64k-devel-6.12.0-124.8.1.el10_1 +12
    • Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.8.1.el10_1, kernel-64k-6.12.0-124.8.1.el10_1, kernel-64k-core-6.12.0-124.8.1.el10_1 +29
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.8.1.el10_1, libperf-6.12.0-124.8.1.el10_1
    • Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.8.1.el10_1, kernel-rt-64k-6.12.0-124.8.1.el10_1, kernel-rt-64k-core-6.12.0-124.8.1.el10_1 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.8.1.el10_1, kernel-rt-core-6.12.0-124.8.1.el10_1, kernel-rt-debug-6.12.0-124.8.1.el10_1 +9
  • RHSA-2025:19930 Released 2025-11-10 · Red Hat rating Moderate
    kernel security update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.62.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.62.1.el9_6, kernel-64k-devel-5.14.0-570.62.1.el9_6 +12
    • Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.62.1.el9_6, kernel-64k-5.14.0-570.62.1.el9_6, kernel-64k-core-5.14.0-570.62.1.el9_6 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.62.1.el9_6, libperf-5.14.0-570.62.1.el9_6
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.62.1.el9_6, kernel-rt-64k-5.14.0-570.62.1.el9_6, kernel-rt-64k-core-5.14.0-570.62.1.el9_6 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.62.1.el9_6, kernel-rt-core-5.14.0-570.62.1.el9_6, kernel-rt-debug-5.14.0-570.62.1.el9_6 +11

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:20095
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:19930, RHSA-2025:20518
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2025:20095
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2025:19930, RHSA-2025:20518
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:20095
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:19930, RHSA-2025:20518
Red Hat Enterprise Linux Real Time (v. 10)Fixed RHSA-2025:20095
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2025:19930, RHSA-2025:20518
Red Hat Enterprise Linux Real Time for NFV (v. 10)Fixed RHSA-2025:20095
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2025:19930, RHSA-2025:20518

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-36357
  2. 2026-10-03 Alias added: GHSA-76p2-wq47-mf7x
  3. 2026-10-29 Affected versions changed · Red Hat
  4. 2026-10-30 Affected versions changed · Red Hat

References

Other 1

  • TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
  • TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
  • TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
  • TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
  • TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
  • TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
See all 508 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences