CVE-2024-50102 addresses a "Meltdown Lite" type vulnerability in the Linux kernel's x86 architecture, specifically affecting how non-canonical user addresses are handled in kernel space, potentially leading to speculative data leaks. This flaw impacts the Linux kernel, particularly Zen 5 and newer AMD processors, due to changes in how STAC/CLAC instructions serialize execution. With a CVSS score of 5.5 (MEDIUM), this local vulnerability allows an authenticated attacker to achieve high confidentiality impact through speculative execution, without requiring user interaction. Currently, there is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.4, < 6.11.6CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.