CVE-2024-56721

x86/CPU/AMD: Terminate the erratum_1386_microcode array

High · published December 29, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/CPU/AMD: Terminate the erratum_1386_microcode array

The erratum_1386_microcode array requires an empty entry at the end.

Otherwise x86_match_cpu_with_stepping() will continue iterate the array after

it ended.

Add an empty entry to erratum_1386_microcode to its end.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2024-12-29T11:29Z
EPSS history
Timeline
  • 29 DEC 11:29Z
    x86/CPU/AMD: Terminate the erratum_1386_microcode array
    cvelistv5