CVE-2024-2201

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

The following products are affected by CVE-2024-2201 vulnerability.

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-2201.

URL	Resource
http://www.openwall.com/lists/oss-security/2024/04/09/15
http://www.openwall.com/lists/oss-security/2024/05/07/7
http://xenbits.xen.org/xsa/advisory-456.html
https://download.vusec.net/papers/inspectre_sec24.pdf
https://github.com/vusec/inspectre-gadget?tab=readme-ov-file
https://lists.fedoraproject.org/archives/list/[email protected]/message/6QKNCPX7CJUK4I6BRGABAUQK2DMQZUCA/
https://lists.fedoraproject.org/archives/list/[email protected]/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/
https://lists.fedoraproject.org/archives/list/[email protected]/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH/
https://nvd.nist.gov/vuln/detail/CVE-2024-2201
https://www.cve.org/CVERecord?id=CVE-2024-2201
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/branch-history-injection.htm
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html#inpage-nav-8
https://www.kb.cert.org/vuls/id/155143
https://www.openwall.com/lists/oss-security/2024/04/09/15
https://www.vusec.net/projects/native-bhi/