CVE-2024-2193 Race condition in CPU
An unauthenticated attacker can exploit a speculative race condition in modern CPUs to disclose arbitrary data from the processor.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-2193?
CVE-2024-2193 is a medium-severity vulnerability in AMD CPU, published on 15 Mar 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.
Weakness: CWE-362
Which versions are affected by CVE-2024-2193?
How do I fix CVE-2024-2193?
Apply the vendor's patch.
Is CVE-2024-2193 being exploited?
There is no known exploitation of CVE-2024-2193 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as ALPINE-CVE-2024-2193, DEBIAN-CVE-2024-2193, GHSA-3p53-237x-3cww, ROOT-OS-DEBIAN-11-CVE-2024-2193, ROOT-OS-DEBIAN-12-CVE-2024-2193, ROOT-OS-DEBIAN-13-CVE-2024-2193 and 2 more.