A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 26, 2024 | Mar 15, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-develUpgrade kernel-livepatch-4.14.336-257.568Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfo | Apr 1, 2024 | Mar 15, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headers | Feb 17, 2025 | Mar 12, 2024 |
| Debian | — | Upgrade xen | Dec 30, 2024 | Mar 15, 2024 |
| F5 Big Ip | — | — | May 22, 2024 | Mar 15, 2024 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade xen-develUpgrade xen-tools-xendomains-wait-diskUpgrade xen-toolsUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xenUpgrade xen-libsUpgrade xen-libs-32bit | Apr 4, 2024 | Mar 15, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub