What is the CVSS score of CVE-2024-36348?

CVE-2024-36348 has a CVSS 3.1 base score of 3.8 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by CVE-2024-36348?

CVE-2024-36348 is a low-severity vulnerability (CVSS 3.8). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.. A patch is available.

How to fix or mitigate CVE-2024-36348?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Ubuntu CVE-2024-36348

EUVD-2024-54761 LOW

2025-07-08 psirt@amd.com

Information Disclosure Ubuntu Debian

3.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.8 LOW

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Ubuntu

LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2024-54761

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 17:15 nvd

LOW 3.8

DescriptionCVE.org

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage.

Analysis

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls.

RemediationAI

Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Low

amd64-microcode

Release	Status	Version
plucky	ignored	end of life, was deferred [2025-07-10]
bionic	not-affected	see Notes
focal	not-affected	see Notes
jammy	not-affected	see Notes
noble	not-affected	see Notes
trusty	not-affected	see Notes
upstream	needs-triage	-
xenial	not-affected	see Notes
oracular	ignored	end of life, was deferred [2025-07-10]
questing	not-affected	see Notes

Debian

amd64-microcode

Release	Status	Fixed Version	Urgency
bullseye/non-free	vulnerable	3.20240820.1~deb11u1	-
bullseye/non-free (security)	vulnerable	3.20250311.1~deb11u1	-
bookworm/non-free-firmware	vulnerable	3.20250311.1~deb12u1	-
bookworm/non-free-firmware (security)	vulnerable	3.20230719.1~deb12u1	-
trixie/non-free-firmware	vulnerable	3.20250311.1	-
forky/non-free-firmware, sid/non-free-firmware	vulnerable	3.20251202.1	-
(unstable)	fixed	(unfixed)	unimportant

CVE-2024-36348 vulnerability details – vuln.today

Back

Ubuntu CVE-2024-36348

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code