Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-2201

22
FAUCET Score

CVE-2024-2201 is a cross-privilege Spectre v2 vulnerability impacting Linux kernel memory on Intel systems, allowing attackers to bypass existing mitigations like FineIBT. With a CVSS score of 4.7 (Medium), exploitation requires local access and high attack complexity, but can lead to arbitrary kernel memory leakage. While not currently in CISA's KEV catalog, there is no public exploit code available, and community discussion and media coverage are minimal, suggesting low immediate exploitation risk.

Impacted Technologies

VendorProductVersion(s)CPE
XenXen
See advisory "x86: Native Branch History Injection"CNA affected

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.0
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
8.55%
Probability of exploitation in next 30 days
EPSS Percentile
94.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0856 is in the 99th percentile among its peer group of 1,297 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (13)

codesyspatch availablevia llm_extracted
View patch
datadogpatch availablevia llm_extracted
Fixed in: 9.1
esphomepatch availablevia llm_extracted
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.16.1.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.90.1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.90.1.rt14.375.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-427.42.1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-rt-0:3.10.0-1160.125.1.rt56.1277.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-0:3.10.0-1160.125.1.el7
View patch
siemenspatch availablevia llm_extracted
Fixed in: 9.1
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel

Vendor Advisories (6)

siemensllm-siemens-8ff56bf1149f5ad0

Spectre branch target injection ("VMScape")

Nov 19, 2025
datadogllm-datadog-861c6a2c94e77c1d

Spectre branch target injection ("VMScape") fix

Nov 19, 2025
codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
microsoft2024-Dec/CVE-2024-2201Moderate

CVE-2024-2201

Dec 10, 2024
redhatCVE-2024-2201Moderate

hw: cpu: intel: Native Branch History Injection (BHI)

Apr 9, 2024

References

github.com / vusec/inspectre-gadget
lists.fedoraproject.org / archives/list/[email protected]/message/6QKNCPX7CJUK4I6BRGABAUQK2DMQZUCA
lists.fedoraproject.org / archives/list/[email protected]/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3
lists.fedoraproject.org / archives/list/[email protected]/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH
intel.com / content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/branch-history-injection.htm
kb.cert.org / vuls/id/155143
openwall.com / lists/oss-security/2024/04/09/15
openwall.com / lists/oss-security/2024/05/07/7
xenbits.xen.org / xsa/advisory-456.html