A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 26, 2024 | Mar 15, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-livepatch-5.15.149-99.161Upgrade kernelUpgrade kernel-livepatch-4.14.336-257.568Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftool-debuginfo | Apr 1, 2024 | Mar 15, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-6.1.79-99.164Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo | Feb 17, 2025 | Mar 12, 2024 |
| Debian | — | Upgrade xen | Dec 30, 2024 | Mar 15, 2024 |
| F5 Big Ip | — | — | May 22, 2024 | Mar 15, 2024 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade xen-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade xen-develUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-libsUpgrade xen-doc-htmlUpgrade xen | Apr 4, 2024 | Mar 15, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub