GhostRace – New Data Leak Vulnerability Affects Modern CPUs

Researchers disclosed GhostRace (CVE-2024-2193), a Spectre v1–style transient execution vulnerability that combines branch misprediction and race conditions to create Speculative Race Conditions (SRCs) and Speculative Concurrent Use-After-Free (SCUAF) gadgets, allowing an attacker with CPU access to exfiltrate arbitrary host memory. The report outlines affected synchronization patterns across microarchitectures (x86, ARM, RISC-V), vendor and hypervisor reactions (AMD guidance, Xen hardening), and notes this is a hardware/architecture-level issue with mitigations aligning with existing Spectre protections.