Xen updates advisory on AMD Transient Scheduler Attacks (XSA-525)
Original title: Xen Security Advisory 525 v1 (CVE-2024-36350,CVE-2024-36357,CVE-2026-0004) - x86: Transient Scheduler Attacks (update)
The update covers CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004 after AMD reported further TSA properties.
The Xen security team posted an update to XSA-525 on x86 Transient Scheduler Attacks, citing CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004. AMD discovered further properties of the attacks. Earlier advisory XSA-471 addressed TSA-SQ and TSA-L1 on Zen 3 and Zen 4 CPUs. The available text ends while repeating AMD’s prior statement that Zen 5 CPUs were not vulnerable to TSA-SQ.
Unconfirmed: The excerpt is cut off before stating whether Zen 5 is affected by the newly described properties.
- XSA-471 previously covered TSA-SQ and TSA-L1 variants.
- Those earlier variants affected Zen 3 and Zen 4 CPUs.
- The posted excerpt is truncated before the Zen 5 discussion is completed.
Impact: Further Transient Scheduler Attack properties on AMD x86 CPUs
| Product | Affected |
|---|---|
| AMD Zen 3 CPUs | — |
| AMD Zen 4 CPUs | — |
- Vendors
- AMD
- Organizations
- Xen Project
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-36350 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of… | 5.6 | <1% | ||
| CVE-2024-36357 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of… | 5.6 | <1% | ||
| CVE-2026-0004 | — | — | — |
From the original article
Posted by Xen . org security team on Nov 10 Xen Security Advisory CVE-2024-36350,CVE-2024-36357,CVE-2026-0004 / XSA-525 x86: Transient Scheduler Attacks (update) ISSUE DESCRIPTION ================= AMD have discovered further properties of Transient Scheduler Attacks. The previously published XSA-471 dealt with two TSA variants, TSA-SQ and TSA-L1 on Zen3 and Zen4 CPUs.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.