{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-36353", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2024-05-23T19:44:50.000Z", "datePublished": "2025-03-02T17:33:11.636Z", "dateUpdated": "2025-09-25T19:24:49.891Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-09-25T19:24:49.891Z"}, "affected": [{"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 7045 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 7000 Series Desktop Processor", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 7030 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 9000HX Series Processors", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 AI Max 300 Series Processors", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Z2 Series Processors Extreme", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 7035 Series Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Desktop Processors", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 8000 Series Desktop Processors", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 9000 Series Desktop Processors", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Ryzen\u2122 Embedded R1000", "versions": [{"version": "Kernel 6.12.25 LTS", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Ryzen\u2122 Embedded R2000", "versions": [{"version": "Kernel 6.12.25 LTS", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")", "versions": [{"version": "Kernel 6.12.25 LTS", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Ryzen\u2122 Embedded V2000", "versions": [{"version": "Kernel 6.12.25 LTS", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Ryzen\u2122 Embedded V3000", "versions": [{"version": "Kernel 6.12.25 LTS", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen Embedded V2000A Series Processors", "versions": [{"version": "Kernel 6.12.25 LTS", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 RX 5000/PRO W5000 Series Graphics Products", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 RX6000/PRO W6000 Series Graphics Products", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 RX 7000/PRO W7000 Series Graphics Products", "versions": [{"version": "Radeon Software For Linux 25.10.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 PRO V520", "versions": [{"version": "Contact your AMD Customer Engineering representative", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 PRO V620", "versions": [{"version": "Contact your AMD Customer Engineering representative", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 PRO V710", "versions": [{"version": "Contact your AMD Customer Engineering representative", "status": "unaffected"}]}], "datePublic": "2025-09-25T19:03:13.393Z", "descriptions": [{"lang": "en", "value": "Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.<br>"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-459", "description": "CWE-459 Incomplete Cleanup", "lang": "en", "type": "CWE"}]}], "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6019.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-03T15:49:49.731257Z", "id": "CVE-2024-36353", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T15:50:05.010Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36353", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-03T15:49:49.731257Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T15:49:55.295Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7045 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7000 Series Desktop Processor", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7030 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 9000HX Series Processors", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 AI Max 300 Series Processors", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Z2 Series Processors Extreme", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7035 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Desktop Processors", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 8000 Series Desktop Processors", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 9000 Series Desktop Processors", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Ryzen\u2122 Embedded R1000", "versions": [{"status": "unaffected", "version": "Kernel 6.12.25 LTS"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Ryzen\u2122 Embedded R2000", "versions": [{"status": "unaffected", "version": "Kernel 6.12.25 LTS"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")", "versions": [{"status": "unaffected", "version": "Kernel 6.12.25 LTS"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Ryzen\u2122 Embedded V2000", "versions": [{"status": "unaffected", "version": "Kernel 6.12.25 LTS"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Ryzen\u2122 Embedded V3000", "versions": [{"status": "unaffected", "version": "Kernel 6.12.25 LTS"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen Embedded V2000A Series Processors", "versions": [{"status": "unaffected", "version": "Kernel 6.12.25 LTS"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 RX 5000/PRO W5000 Series Graphics Products", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 RX6000/PRO W6000 Series Graphics Products", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 RX 7000/PRO W7000 Series Graphics Products", "versions": [{"status": "unaffected", "version": "Radeon Software For Linux 25.10.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 PRO V520", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 PRO V620", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 PRO V710", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}], "defaultStatus": "affected"}], "datePublic": "2025-09-25T19:03:13.393Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6019.html"}], "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "descriptions": [{"lang": "en", "value": "Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.", "supportingMedia": [{"type": "text/html", "value": "Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-459", "description": "CWE-459 Incomplete Cleanup"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-09-25T19:24:49.891Z"}}}, "cveMetadata": {"cveId": "CVE-2024-36353", "state": "PUBLISHED", "dateUpdated": "2025-09-25T19:24:49.891Z", "dateReserved": "2024-05-23T19:44:50.000Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2025-03-02T17:33:11.636Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality."}, {"lang": "es", "value": "Una depuraci\u00f3n insuficiente de la memoria global de la GPU podr\u00eda permitir que un proceso malicioso que se ejecuta en la misma GPU lea valores de memoria restantes, lo que podr\u00eda provocar una p\u00e9rdida de confidencialidad."}], "id": "CVE-2024-36353", "lastModified": "2025-09-25T20:15:33.850", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 4.0, "source": "psirt@amd.com", "type": "Secondary"}]}, "published": "2025-03-02T18:15:34.033", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6019.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-459"}], "source": "psirt@amd.com", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: hw:amd Cross-Process GPU memory disclosure", "id": "2343791", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2343791"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-416", "details": ["Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values, potentially leading to loss of confidentiality."], "name": "CVE-2024-36353", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Will not fix", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-02-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-36353\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-36353\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-6019.html\nhttps://www.amd.com/en/support/download/linux-drivers.html"], "threat_severity": "Moderate"}

{}