CVE-2024-2201
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-2201
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-2201.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-2201
- Downstream
- Related
- Published
- 2024-12-19T21:15:08Z
- Modified
- 2025-08-09T20:01:27Z
- Summary
- [none]
- Details
-
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
- References
-
- http://xenbits.xen.org/xsa/advisory-456.html
- https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/branch-history-injection.htm
- https://github.com/vusec/inspectre-gadget?tab=readme-ov-file
- http://www.openwall.com/lists/oss-security/2024/04/09/15
- http://www.openwall.com/lists/oss-security/2024/05/07/7
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QKNCPX7CJUK4I6BRGABAUQK2DMQZUCA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH/
- https://www.kb.cert.org/vuls/id/155143