AMD CPU (TSA-L1): Transient Scheduler Attack - store-to-load forwarding leak across contexts on Zen 3/4

CVE-2024-36350Kernel, userspace & hypervisorcurated

Impact

Transient Scheduler Attack - store-to-load forwarding leak across contexts on Zen 3/4

Who can reach it

Any tenant process in a container; tenant VM guest

What to do

Microcode + kernel mitigation (VERW on transitions) + reboot; standing perf cost. Also tracked as Xen XSA-471

References

https://access.redhat.com/security/cve/CVE-2024-36350

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.