Log in Start free

Vulnerability · Published Jun 27, 2025 · Assigned by AMD

CVE-2024-36347

Medium 6.4

In plain English

A medium-severity security flaw in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.1%top 98.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSamd64-microcodeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSamd64-microcodeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:25.10amd64-microcodeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:26.04:LTSamd64-microcodeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:26.10amd64-microcodeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux6.8.0-110.110UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux6.8.0-110.110USN-8179-1
Ubuntu:25.10linux6.17.0-22.22USN-8177-1
Ubuntu:25.10linux6.17.0-22.22UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-aws6.8.0-1052.55UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-aws6.8.0-1052.55USN-8179-1
Ubuntu:25.10linux-aws6.17.0-1012.12USN-8183-2
Ubuntu:25.10linux-aws6.17.0-1012.12UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1012.12~24.04.1USN-8183-2
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1052.55~22.04.1USN-8179-1
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure6.8.0-1054.60USN-8258-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1054.60UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-azure6.17.0-1013.13UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-azure6.17.0-1013.13USN-8245-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1013.13~24.04.1USN-8245-1
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1013.13~24.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1USN-8440-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gcp6.8.0-1054.57USN-8179-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1054.57UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-gcp6.17.0-1012.12UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-gcp6.17.0-1012.12USN-8183-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1012.12~24.04.1USN-8183-1
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1054.57~22.04.1USN-8179-4
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gke6.8.0-1050.56UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gke6.8.0-1050.56USN-8179-1
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1037.40UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1037.40USN-8179-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-22.22~24.04.1UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-22.22~24.04.1USN-8183-2
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-110.110~22.04.1USN-8179-3
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-ibm6.8.0-1051.51USN-8179-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1051.51UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1051.51~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1051.51~22.04.1USN-8179-3
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-110.110.1UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-110.110.1USN-8179-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-110.110.1~22.04.1USN-8179-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-110.110.1~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1051.54UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1051.54USN-8185-1
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1018.18UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1051.54~22.04.1USN-8185-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1051.54~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1051.54.1USN-8185-2
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1051.54.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1022.22USN-8265-1
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1022.22UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1020.20USN-8245-1
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1020.20UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oracle6.8.0-1049.50UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oracle6.8.0-1049.50USN-8203-1
Ubuntu:25.10linux-oracle6.17.0-1011.11UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-oracle6.17.0-1011.11USN-8183-2
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1011.11~24.04.1UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1011.11~24.04.1USN-8183-2
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1049.50~22.04.1USN-8203-1
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1049.50~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-raspi6.8.0-1052.56USN-8179-3
Ubuntu:24.04:LTSlinux-raspi6.8.0-1052.56UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-raspi6.17.0-1013.13UBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-36347
Ubuntu:25.10linux-realtime6.17.0-1010.11UBUNTU-CVE-2024-36347
Ubuntu:25.10linux-realtime6.17.0-1010.11USN-8177-1
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-36347
Ubuntu:25.10linux-riscv6.17.0-22.22.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-22.22.1~24.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-36347
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1029.30USN-8261-1
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2024-36347
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-36347

Affected products (as reported)

VendorProductVersions
AMD AMD EPYC™ 7001 Series see references
AMD AMD EPYC™ 7002 Series see references
AMD AMD EPYC™ 7003 Series see references
AMD AMD EPYC™ 9004 Series see references
AMD AMD EPYC™ 4004 Series see references
AMD AMD EPYC™ 9005 Series see references
AMD AMD Instinct™ MI300A see references
AMD AMD Ryzen™ 5000 Series Desktop Processors see references
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Desktop Processors see references
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7000 Series Desktop Processors see references
AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 9000 Series Desktop Processors see references
AMD AMD Ryzen™ Threadripper™ 3000 Series Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors see references
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7045 Series Mobile Processors see references

Weakness: CWE-347 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

References