Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-36348

Fixed in a distro release EPSS <1%CVSS 3.8

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage.

Published 2025-07-08 · CVE record · OSV

Products: AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ 4004 Series Processors, AMD EPYC™ 9V64H Processor, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 8004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors

Distro releases

ReleasePackageFixed in
Debian 12amd64-microcodeno fix
Debian 13amd64-microcodeno fix
Debian 14amd64-microcodeno fix
SUSE Linux Enterprise High Availability Extension 15 SP4kernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise High Availability Extension 15 SP6kernel-default6.4.0-150600.23.65.1
SUSE Linux Enterprise High Availability Extension 15 SP7kernel-default6.4.0-150700.53.11.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-64kb5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-default-base5.14.21-150400.24.194.1.150400.24.98.3
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-docs5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-obs-build5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-source5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSkernel-syms5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-64kb5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-default-base5.14.21-150400.24.194.1.150400.24.98.3
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-docs5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-obs-build5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-source5.14.21-150400.24.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSkernel-syms5.14.21-150400.24.194.1
SUSE Linux Enterprise Live Patching 15 SP4kernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise Live Patching 15 SP4kernel-livepatch-SLE15-SP4_Update_481-150400.9.7.1
SUSE Linux Enterprise Live Patching 15 SP6kernel-default6.4.0-150600.23.65.1
SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-SLE15-SP6-RT_Update_141-150600.1.5.1
SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-SLE15-SP6_Update_141-150600.13.3.4
SUSE Linux Enterprise Live Patching 15 SP7kernel-default6.4.0-150700.53.11.1
SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-SLE15-SP7-RT_Update_31-150700.1.5.1
SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-SLE15-SP7_Update_31-150700.15.3.4
SUSE Linux Enterprise Micro 5.3kernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise Micro 5.3kernel-default-base5.14.21-150400.24.194.1.150400.24.98.3
SUSE Linux Enterprise Micro 5.3kernel-rt5.14.21-150400.15.142.1
SUSE Linux Enterprise Micro 5.3kernel-source-rt5.14.21-150400.15.142.1
SUSE Linux Enterprise Micro 5.4kernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise Micro 5.4kernel-default-base5.14.21-150400.24.194.1.150400.24.98.3
SUSE Linux Enterprise Micro 5.4kernel-rt5.14.21-150400.15.142.1
SUSE Linux Enterprise Micro 5.4kernel-source-rt5.14.21-150400.15.142.1
SUSE Linux Enterprise Module for Basesystem 15 SP6kernel-64kb6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Basesystem 15 SP6kernel-default6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Basesystem 15 SP6kernel-default-base6.4.0-150600.23.65.1.150600.12.28.4
SUSE Linux Enterprise Module for Basesystem 15 SP6kernel-source6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Basesystem 15 SP6kernel-zfcpdump6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Basesystem 15 SP7kernel-64kb6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP7kernel-default6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP7kernel-default-base6.4.0-150700.53.11.1.150700.17.9.4
SUSE Linux Enterprise Module for Basesystem 15 SP7kernel-source6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP7kernel-zfcpdump6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-coco6.4.0-15061.28.coco15sp6.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-coco_debug6.4.0-15061.28.coco15sp6.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-source-coco6.4.0-15061.28.coco15sp6.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-syms-coco6.4.0-15061.28.coco15sp6.1
SUSE Linux Enterprise Module for Development Tools 15 SP6kernel-docs6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Development Tools 15 SP6kernel-obs-build6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Development Tools 15 SP6kernel-source6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Development Tools 15 SP6kernel-syms6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Development Tools 15 SP7kernel-docs6.4.0-150700.53.11.3
SUSE Linux Enterprise Module for Development Tools 15 SP7kernel-obs-build6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Development Tools 15 SP7kernel-source6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Development Tools 15 SP7kernel-syms6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Legacy 15 SP6kernel-default6.4.0-150600.23.65.1
SUSE Linux Enterprise Module for Legacy 15 SP7kernel-default6.4.0-150700.53.11.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6kernel-azure6.4.0-150600.8.48.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6kernel-source-azure6.4.0-150600.8.48.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6kernel-syms-azure6.4.0-150600.8.48.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7kernel-azure6.4.0-150700.20.11.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7kernel-source-azure6.4.0-150700.20.11.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7kernel-syms-azure6.4.0-150700.20.11.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-64kb5.14.21-150400.24.194.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-default-base5.14.21-150400.24.194.1.150400.24.98.3
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-docs5.14.21-150400.24.194.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-obs-build5.14.21-150400.24.194.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-source5.14.21-150400.24.194.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-syms5.14.21-150400.24.194.1
SUSE Linux Enterprise Server 15 SP4-LTSSkernel-zfcpdump5.14.21-150400.24.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4kernel-default5.14.21-150400.24.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4kernel-default-base5.14.21-150400.24.194.1.150400.24.98.3
SUSE Linux Enterprise Server for SAP Applications 15 SP4kernel-docs5.14.21-150400.24.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4kernel-obs-build5.14.21-150400.24.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4kernel-source5.14.21-150400.24.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4kernel-syms5.14.21-150400.24.194.1
SUSE Linux Enterprise Workstation Extension 15 SP6kernel-default6.4.0-150600.23.65.1
SUSE Linux Enterprise Workstation Extension 15 SP7kernel-default6.4.0-150700.53.11.1
SUSE Linux Micro 6.0kernel-default6.4.0-32.1
SUSE Linux Micro 6.0kernel-default-base6.4.0-32.1.21.10
SUSE Linux Micro 6.0kernel-kvmsmall6.4.0-32.1
SUSE Linux Micro 6.0kernel-rt6.4.0-35.1
SUSE Linux Micro 6.0kernel-source6.4.0-32.1
SUSE Linux Micro 6.0kernel-source-rt6.4.0-35.1
SUSE Linux Micro 6.1kernel-default6.4.0-32.1
SUSE Linux Micro 6.1kernel-default-base6.4.0-32.1.21.10
SUSE Linux Micro 6.1kernel-kvmsmall6.4.0-32.1
SUSE Linux Micro 6.1kernel-rt6.4.0-35.1
SUSE Linux Micro 6.1kernel-source6.4.0-32.1
SUSE Linux Micro 6.1kernel-source-rt6.4.0-35.1
SUSE Real Time Module 15 SP6kernel-rt6.4.0-150600.10.49.1
SUSE Real Time Module 15 SP6kernel-rt_debug6.4.0-150600.10.49.1
SUSE Real Time Module 15 SP6kernel-source-rt6.4.0-150600.10.49.1
SUSE Real Time Module 15 SP6kernel-syms-rt6.4.0-150600.10.49.1
SUSE Real Time Module 15 SP7kernel-rt6.4.0-150700.7.13.1
SUSE Real Time Module 15 SP7kernel-source-rt6.4.0-150700.7.13.1
SUSE Real Time Module 15 SP7kernel-syms-rt6.4.0-150700.7.13.1
openSUSE Leap 15.6dtb-aarch646.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-64kb6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-azure6.4.0-150600.8.48.1
openSUSE Leap 15.6kernel-debug6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-default6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-default-base6.4.0-150600.23.65.1.150600.12.28.4
openSUSE Leap 15.6kernel-docs6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-kvmsmall6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-obs-build6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-obs-qa6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-rt6.4.0-150600.10.49.1
openSUSE Leap 15.6kernel-rt_debug6.4.0-150600.10.49.1
openSUSE Leap 15.6kernel-source6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-source-azure6.4.0-150600.8.48.1
openSUSE Leap 15.6kernel-source-rt6.4.0-150600.10.49.1
openSUSE Leap 15.6kernel-syms6.4.0-150600.23.65.1
openSUSE Leap 15.6kernel-syms-azure6.4.0-150600.8.48.1
openSUSE Leap 15.6kernel-syms-rt6.4.0-150600.10.49.1
openSUSE Leap 15.6kernel-zfcpdump6.4.0-150600.23.65.1