CVE-2024-2201

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

CVSS v3 4.7 MEDIUM

4.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2024/04/09/15
http://www.openwall.com/lists/oss-security/2024/05/07/7
http://xenbits.xen.org/xsa/advisory-456.html
https://github.com/vusec/inspectre-gadget?tab=readme-ov-file
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QKNCPX7CJUK4I6BRGABAUQK2DMQZUCA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH/
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/branch-history-injection.htm
https://www.kb.cert.org/vuls/id/155143

Configurations

No configuration.

History

No history.

Information

Published : 2024-12-19 21:15

Updated : 2026-06-17 07:23

NVD link : CVE-2024-2201

Mitre link : CVE-2024-2201

CVE.ORG link : CVE-2024-2201

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2024-2201", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-2201", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-31T18:51:54.984364Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.0}]}, "affected": [{"source": "cret@cert.org", "affectedData": [{"vendor": "Xen", "product": "Xen", "versions": [{"status": "affected", "version": "See advisory \"x86: Native Branch History Injection\""}]}]}], "published": "2024-12-19T21:15:08.103", "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/04/09/15", "source": "cret@cert.org"}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/07/7", "source": "cret@cert.org"}, {"url": "http://xenbits.xen.org/xsa/advisory-456.html", "source": "cret@cert.org"}, {"url": "https://github.com/vusec/inspectre-gadget?tab=readme-ov-file", "source": "cret@cert.org"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QKNCPX7CJUK4I6BRGABAUQK2DMQZUCA/", "source": "cret@cert.org"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/", "source": "cret@cert.org"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH/", "source": "cret@cert.org"}, {"url": "https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/branch-history-injection.htm", "source": "cret@cert.org"}, {"url": "https://www.kb.cert.org/vuls/id/155143", "source": "cret@cert.org"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems."}, {"lang": "es", "value": "Una vulnerabilidad de cross-privilege en Spectre v2 permite a los atacantes eludir todas las mitigaciones implementadas, incluida la reciente Fine (IBT), y filtrar memoria arbitraria del kernel de Linux en sistemas Intel."}], "lastModified": "2026-06-17T07:23:55.403", "sourceIdentifier": "cret@cert.org"}