What’s Vulnerable › Vulnerabilities

CVE-2024-56721: x86/CPU/AMD: Terminate the erratum_1386_microcode array

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-29 · updated 2026-06-17
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array requires an empty entry at the end. Otherwise x86_match_cpu_with_stepping() will continue iterate the array after it ended. Add an empty entry to erratum_1386_microcode to its end.

Affected products

• Linux kernel: from 6.10 before 6.11.11; from 6.12 before 6.12.2 — fixed in 6.11.11, 6.12.2

How to fix

Upgrade to a fixed version: Linux kernel 6.11.11, 6.12.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/82d6b82cf89d950982ac240ba068c3a7e1f23b0a
• https://git.kernel.org/stable/c/ccfee14f08b8699132b87bc6d78e0fa75bf094dd
• https://git.kernel.org/stable/c/ff6cdc407f4179748f4673c39b0921503199a0ad

Get alerted when CVE-2024-56721 or the next vulnerability affects your stack