CVE-2024-36315

Fixed in a distro release EPSS <1%CVSS 5.7

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.

Published 2026-05-13 · CVE record · OSV

Products: AMD EPYC™ Series 9004 Processors, AMD EPYC™Series 4004 Processors, AMD EPYC™ 8004 Series Processors, AMD Instinct™ MI300A Series Processors, AMD Ryzen™ Z1 Series Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"), AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"), AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD EPYC™ Embedded 8004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"), AMD Ryzen™ Embedded 8000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors

Distro releases