CVE-2024-28956 is a medium severity information disclosure vulnerability in certain Intel processors caused by exposure of sensitive data in shared microarchitectural structures during transient execution. The vulnerability can be exploited by an authenticated local user with high attack complexity and low privileges. Red Hat's advisory indicates that updated kernel and microcode_ctl packages include fixes for this vulnerability. The kernel update addresses related use-after-free and race conditions, while microcode_ctl updates provide the necessary microcode patches. The vulnerability affects Red Hat Enterprise Linux 9 across multiple architectures and requires system reboot after patching.

An authenticated local user may potentially disclose sensitive information due to the vulnerability in Intel processors' microarchitectural structures during transient execution. The CVSS score of 5.7 reflects a medium impact with high attack complexity and limited privileges required. There are no known exploits in the wild. The vulnerability could lead to unauthorized information disclosure but does not allow privilege escalation or remote exploitation.

Red Hat has released official patches for this vulnerability in the Linux kernel and microcode_ctl packages for Red Hat Enterprise Linux 9. Users should apply these updates promptly and reboot their systems to ensure the fixes take effect. The vendor advisory provides detailed instructions and package versions. No additional mitigation is required beyond applying the official updates.