CVE-2024-2201

CVE-2024-2201

Medium · published December 19, 2024

CVSS v3.1
4.7
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.08793 · 95.2th percentile
Published
2024-12-19T20:28Z
EPSS history
Timeline
  • 19 DEC 20:28Z
    CVE-2024-2201
    cvelistv5