AMD PROCESSORS · CVE-2026-0004 · Infrastructure
NO FIX YET
Some AMD processors have a transient execution flaw that lets code running on the system infer data held in the L1 data cache. An attacker who can already run code on the machine can read sensitive information across privileged boundaries.
first public Nov 10, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Systems running on affected AMD processors where untrusted code can execute, such as shared hosts, multi-tenant cloud machines or virtual machine hosts. The sources do not list the affected processor models or firmware versions. Systems where only trusted code runs can likely deprioritise this, but the sources do not say.
Not affected if no-untrusted-code-execution, non-amd-hardware
Who cares amd, cpu, multi-tenant, virtualization
Unknown from the sources.
No fix yet, per the sources.
A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.
This page as .md · .json · CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.