Is CVE-2024-36315 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-36315 being exploited in the wild.

How severe is CVE-2024-36315?

Informational severity, with a CVSS score of 5.7, published 13 May 2026.

Is there a fix for CVE-2024-36315?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-36315 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2024-36315?

Check whether you run Amd Processors. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-36315: AMD Processors Speculation Barrier Bypass via LFENCE Improper Enforcement

CVE-2024-36315 · Severity: info · CVSS 5.7 · Published 2026-05-13

A vulnerability in certain AMD processors could allow an attacker with local access to bypass security barriers designed to protect sensitive data. By exploiting how the processor handles specific instructions, an attacker could potentially gain unauthorized access to information stored in the system's memory. This could lead to the exposure of confidential data such as passwords or encryption keys.

Technologies: Amd Processors. Vendors: Amd.

Quick answers

Is CVE-2024-36315 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-36315 being exploited in the wild.
How severe is CVE-2024-36315?: Informational severity, with a CVSS score of 5.7, published 13 May 2026.
Which products and versions are affected?: AMD Processors.
Is there a fix for CVE-2024-36315?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-36315 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2024-36315?: Check whether you run Amd Processors. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is a protection mechanism failure (CWE-693) involving the improper enforcement of the LFENCE serialization property in AMD processors. LFENCE is an instruction used to create a memory fence, ensuring that all previous instructions are globally visible before any subsequent instructions. Due to this flaw, an attacker with local access and low privileges can bypass speculation barriers. This allows for side-channel attacks that can leak sensitive data from memory that should otherwise be protected by speculative execution guards. The attack requires specific timing and architectural conditions (High Attack Complexity) to be successful.

Affected products

AMD Processors

Timeline

2026-05-13: disclosed: Initial disclosure by AMD and NVD publication.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.