A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 26, 2024 | Mar 15, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.210-201.852Upgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.336-257.568Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.149-99.161 | Apr 1, 2024 | Mar 15, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.79-99.164Upgrade bpftoolUpgrade kernel-develUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfo | Feb 17, 2025 | Mar 12, 2024 |
| Debian | — | Upgrade xen | Dec 30, 2024 | Mar 15, 2024 |
| F5 Big Ip | — | — | May 22, 2024 | Mar 15, 2024 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade xen-develUpgrade xen-tools-xendomains-wait-diskUpgrade xen-toolsUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xenUpgrade xen-tools-domU | Apr 4, 2024 | Mar 15, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub