CVE-2024-45332 is a side channel information disclosure vulnerability impacting multiple Intel processor families: CascadeLake, Ice Lake XeonSP, Ice Lake XeonD, Sapphire Rapids, and Emerald Rapids. Intel notified Google about this vulnerability, and Google has implemented mitigations in their cloud environment to protect affected assets. The vulnerability has a CVSS 4.0 base score of 5.7, indicating medium severity, with attack vector local, high complexity, and partial privileges required. There is no current evidence of active exploitation. The Intel advisory INTEL-SA-01247 provides further details.

The vulnerability could allow an attacker with local access and partial privileges to obtain sensitive information through a side channel attack on affected Intel processors. However, the impact is limited by the requirement for local access and high attack complexity. No exploitation has been observed in the wild, and Google has already applied fixes in their cloud infrastructure to mitigate the risk for their customers.

Google has applied fixes to the affected assets in their cloud environment, including Google Cloud, to protect customers. No customer action is required at this time. Users of affected Intel processors should monitor Intel's advisory INTEL-SA-01247 for any updates or official patches. Patch status for other environments is not explicitly stated; check vendor advisories for current remediation guidance.