{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3hamdzen_3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:xen:xen:*:*:*:*:*:*:*:*","cpe:2.3:h:amd:zen_3:*:*:*:*:*:*:*:*","cpe:2.3:h:amd:zen_4:*:*:*:*:*:*:*:*","cpe:2.3:h:amd:zen_5:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":5.6,"id":"CVE-2024-36350"},{"cvss":5.6,"id":"CVE-2024-36357"},{"id":"CVE-2026-0004"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Zen 3 CPUs","Zen 4 CPUs","Zen 5 CPUs","Xen Hypervisor"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["AMD","Xen Project"],"content_html":"\u003cp\u003eThe Xen Project, in coordination with AMD, has updated XSA-525 to provide information on Transient Scheduler Attacks (TSA). Previous assessments regarding Zen 5 CPUs have been corrected, confirming vulnerability to TSA-SQ and TSA-L1 variants (tracked under CVE-2024-36350 and CVE-2024-36357). Additionally, a new variant designated as TSA-Fill has been disclosed, tracked as CVE-2026-0004. These transient execution vulnerabilities may allow unauthorized information disclosure.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eTransient Scheduler Attacks leverage transient execution to potentially leak sensitive information across privilege boundaries within the hypervisor or between virtual machines.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory infrastructure running Xen Hypervisor on AMD Zen 3, Zen 4, and Zen 5 processor architectures.\u003c/li\u003e\n\u003cli\u003eReview AMD Security Bulletin AMD-SB-7073 and AMD-SB-3055 for microcode and mitigation requirements.\u003c/li\u003e\n\u003cli\u003eApply updated microcode and hypervisor patches provided by your server hardware vendor and the Xen Project as they become available to address these TSA variants.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T03:38:42Z","date_published":"2026-11-11T03:38:42Z","id":"https://feed.craftedsignal.io/briefs/2026-11-xen-transient-scheduler-attacks/","summary":"The Xen Project has updated security advisory XSA-525 to address Transient Scheduler Attacks (TSA) on AMD Zen 5 processors and disclose a new TSA-Fill variant affecting x86 architectures.","title":"Xen Project and AMD: Transient Scheduler Attacks (CVE-2024-36350, CVE-2024-36357, CVE-2026-0004)","url":"https://feed.craftedsignal.io/briefs/2026-11-xen-transient-scheduler-attacks/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:h:amd:zen_3:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}