CVE-2024-2201

CVE-2024-2201

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

Affected

Xen

CVSS v3.1 CNA

4.7 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

8.79% chance of exploitation in the next 30 days, 95th percentile

Published

2024-12-19

Updated

2025-01-09

Proof-of-concept exploits (1)

• anonymmousx45-ops/Phoenix-eye0★ · 2026-01-15

Security advisories

• https://www.kb.cert.org/vuls/id/155143

References

• CVE Record
• NVD entry

Related

• CVE-2025-6202