Medium severity · published May 13, 2026
CVE-2024-36315
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially…
5.7
CVSS
0.1%
EPSS
No
On KEV
Description
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
AMD EPYC™ 8004 Series Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 8004 Series Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Series 9004 Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™Series 4004 Processors · AMD
All versions, or not specified · source: vendor
AI
AMD Instinct™ MI300A Series Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 8000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-36315
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-36315
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
More from AMD EPYC™ 8004 Series Processors
8.5
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code…
8.5
CVE-2025-61972
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in…
8.3
CVE-2023-31364
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially…
7.5
CVE-2025-54502
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation…
7.0
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation…