CVE-2024-2201 CVE-2024-2201
MediumCVSS 4.7
EPSS 8.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| azure linux hyperv-daemons(Azure Linux:3.0) | All versions | No fix listed |
| debian/linux(Debian:12) | < 6.1.85-1 | 6.1.85-1 |
| debian/linux(Debian:12) | = 6.1.27-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.37-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.38-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.38-2 | No fix listed |
| debian/linux(Debian:12) | = 6.1.38-2~bpo11+1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.38-3 | No fix listed |
| debian/linux(Debian:12) | = 6.1.38-4 | No fix listed |
| debian/linux(Debian:12) | = 6.1.38-4~bpo11+1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.52-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.55-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.55-1~bpo11+1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.64-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.66-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.67-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.69-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.69-1~bpo11+1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.76-1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.76-1~bpo11+1 | No fix listed |
| debian/linux(Debian:12) | = 6.1.82-1 | No fix listed |
| debian/linux(Debian:13) | < 6.8.9-1 | 6.8.9-1 |
| debian/linux(Debian:14) | < 6.8.9-1 | 6.8.9-1 |
| debian/xen(Debian:12) | < 4.17.5+23-ga4e5191dc0-1 | 4.17.5+23-ga4e5191dc0-1 |
| debian/xen(Debian:12) | = 4.17.1+2-gb773c48e36-1 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xen(Debian:12) | = 4.17.2+55-g0b56bed864-1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.2+76-ge1f9cb16e2-1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.2+76-ge1f9cb16e2-1~deb12u1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.2-1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.3+10-g091466ba55-1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.3+10-g091466ba55-1.1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.3+10-g091466ba55-1.1~exp1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.3+10-g091466ba55-1.1~exp2 | No fix listed |
| debian/xen(Debian:12) | = 4.17.3+10-g091466ba55-1~deb12u1 | No fix listed |
| debian/xen(Debian:12) | = 4.17.3+36-g54dacb5c02-1 | No fix listed |
| debian/xen(Debian:13) | < 4.19.1-1 | 4.19.1-1 |
| debian/xen(Debian:14) | < 4.19.1-1 | 4.19.1-1 |
| ubuntu/linux(Ubuntu:22.04) | < 5.15.0-106.116 | 5.15.0-106.116 |
| ubuntu/linux-kvm(Ubuntu:22.04) | < 5.15.0-1058.63 | 5.15.0-1058.63 |
| ubuntu/linux-raspi(Ubuntu:22.04) | < 5.15.0-1054.57 | 5.15.0-1054.57 |
| Xen | = See advisory "x86: Native Branch History Injection" | No fix listed |
| alpine/xen(Alpine:v3.16) | < 4.16.6-r0 | 4.16.6-r0 |
| alpine/xen(Alpine:v3.17) | < 4.16.6-r0 | 4.16.6-r0 |
| alpine/xen(Alpine:v3.18) | < 4.17.4-r0 | 4.17.4-r0 |
| alpine/xen(Alpine:v3.19) | < 4.18.2-r0 | 4.18.2-r0 |
| alpine/xen(Alpine:v3.20) | < 4.18.2-r0 | 4.18.2-r0 |
| alpine/xen(Alpine:v3.21) | < 4.18.2-r0 | 4.18.2-r0 |
| alpine/xen(Alpine:v3.22) | < 4.18.2-r0 | 4.18.2-r0 |
| alpine/xen(Alpine:v3.23) | < 4.18.2-r0 | 4.18.2-r0 |
| alpine/xen(Alpine:v3.24) | < 4.18.2-r0 | 4.18.2-r0 |
References
- MSRC Security Update Guide vendor-advisory
- Debian Security Tracker CVE-2024-2201 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-6766-1 vendor-advisory
- USN-6766-2 vendor-advisory
- USN-6774-1 vendor-advisory
- USN-6766-3 vendor-advisory
- USN-6795-1 vendor-advisory
- USN-6828-1 vendor-advisory
- USN-6865-1 vendor-advisory
- USN-6866-1 vendor-advisory
- USN-6868-1 vendor-advisory
- USN-6866-2 vendor-advisory
- USN-6866-3 vendor-advisory
- USN-6868-2 vendor-advisory
- www.cve.org
- www.kb.cert.org
- github.com
- www.openwall.com
- www.openwall.com
- xenbits.xen.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- www.intel.com
- security.alpinelinux.org vendor-advisory