Amd Epyc Series 9004 Processors CVE-2024-36315

Q: What is the CVSS score of CVE-2024-36315?

CVE-2024-36315 has a CVSS 4.0 base score of 5.7 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2024-55576 MEDIUM

Protection Mechanism Failure (CWE-693)

2026-05-13 AMD

Information Disclosure Amd Epyc Series 9004 Processors Amd Epyc Series 4004 Processors Amd Epyc 8004 Series Processors Amd Instinct Mi300A Series Processors Amd Ryzen Z1 Series Processors Amd Ryzen 7040 Series Mobile Processors With Radeon Graphics Amd Ryzen 7045 Series Mobile Processors With Radeon Graphics Amd Ryzen 9000 Series Desktop Processors Amd Ryzen 7000 Series Desktop Processors Amd Ryzen 8000 Series Desktop Processors Amd Ryzen 7000 Series Desktop Processors Formerly Codenamed Raphael Amd Ryzen 8000 Series Desktop Processors Formerly Codenamed Phoenix Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Genoa Amd Epyc Embedded 8004 Series Processors Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Bergamo Amd Ryzen Embedded 8000 Series Processors Amd Ryzen Embedded 7000 Series Processors

5.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.7 MEDIUM

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

CVE Published

May 13, 2026 - 03:07 cve.org

MEDIUM 5.7

DescriptionCVE.org

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-693. Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality. Affected products include: Amd Amd Epyc™ Series 9004 Processors, Amd Amd Epyc™Series 4004 Processors, Amd Amd Epyc™ 8004 Series Processors, Amd Amd Instinct™ Mi300A Series Processors, Amd Amd Ryzen™ Z1 Series Processors.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.