Debian Security Bug TrackerDEBIANCVE:CVE-2024-2193

HistoryMar 15, 2024 - 6:15 p.m.

CVE-2024-2193

2024-03-1518:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-2193

spectre v1

speculative execution

unauthenticated attacker

arbitrary data

race conditions

cpu

executable code paths

unix

AI Score

5.8

Confidence

High

EPSS

Percentile

15.5%

JSON

A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux<= 6.1.106-3linux_6.1.106-3_all.deb
Debian11alllinux<= 5.10.223-1linux_5.10.223-1_all.deb
Debian999alllinux<= 6.10.9-1linux_6.10.9-1_all.deb
Debian13alllinux<= 6.10.9-1linux_6.10.9-1_all.deb
Debian12allxen<= 4.17.3+10-g091466ba55-1~deb12u1xen_4.17.3+10-g091466ba55-1~deb12u1_all.deb
Debian11allxen<= 4.14.6-1xen_4.14.6-1_all.deb
Debian999allxen<= 4.17.3+36-g54dacb5c02-1xen_4.17.3+36-g54dacb5c02-1_all.deb
Debian13allxen<= 4.17.3+36-g54dacb5c02-1xen_4.17.3+36-g54dacb5c02-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	<= 6.1.106-3	linux_6.1.106-3_all.deb
Debian	11	all	linux	<= 5.10.223-1	linux_5.10.223-1_all.deb
Debian	999	all	linux	<= 6.10.9-1	linux_6.10.9-1_all.deb
Debian	13	all	linux	<= 6.10.9-1	linux_6.10.9-1_all.deb
Debian	12	all	xen	<= 4.17.3+10-g091466ba55-1~deb12u1	xen_4.17.3+10-g091466ba55-1~deb12u1_all.deb
Debian	11	all	xen	<= 4.14.6-1	xen_4.14.6-1_all.deb
Debian	999	all	xen	<= 4.17.3+36-g54dacb5c02-1	xen_4.17.3+36-g54dacb5c02-1_all.deb
Debian	13	all	xen	<= 4.17.3+36-g54dacb5c02-1	xen_4.17.3+36-g54dacb5c02-1_all.deb

CVE-2024-2193

Related