Zen 3 CPUs - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/zen-3-cpus/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 03:38:42 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgXen Project and AMD: Transient Scheduler Attacks (CVE-2024-36350, CVE-2024-36357, CVE-2026-0004)https://feed.craftedsignal.io/briefs/2026-11-xen-transient-scheduler-attacks/Wed, 11 Nov 2026 03:38:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-xen-transient-scheduler-attacks/The Xen Project has updated security advisory XSA-525 to address Transient Scheduler Attacks (TSA) on AMD Zen 5 processors and disclose a new TSA-Fill variant affecting x86 architectures.The Xen Project, in coordination with AMD, has updated XSA-525 to provide information on Transient Scheduler Attacks (TSA). Previous assessments regarding Zen 5 CPUs have been corrected, confirming vulnerability to TSA-SQ and TSA-L1 variants (tracked under CVE-2024-36350 and CVE-2024-36357). Additionally, a new variant designated as TSA-Fill has been disclosed, tracked as CVE-2026-0004. These transient execution vulnerabilities may allow unauthorized information disclosure.

Impact

Transient Scheduler Attacks leverage transient execution to potentially leak sensitive information across privilege boundaries within the hypervisor or between virtual machines.

Recommendation

  • Inventory infrastructure running Xen Hypervisor on AMD Zen 3, Zen 4, and Zen 5 processor architectures.
  • Review AMD Security Bulletin AMD-SB-7073 and AMD-SB-3055 for microcode and mitigation requirements.
  • Apply updated microcode and hypervisor patches provided by your server hardware vendor and the Xen Project as they become available to address these TSA variants.
]]>highadvisory