CWE-1421 vulnerabilities

CVE-2024-28956 is an information disclosure vulnerability affecting some Intel processors, involving exposure of sensitive information through shared microarchitectural structures during transient execution. It requires local authenticated access and has a medium severity rating with a CVSS score of 5.7. Red Hat has released security updates for the Linux kernel and microcode_ctl packages in Red Hat Enterprise Linux 9 to address this issue. Users must apply these updates and reboot their systems to mitigate the vulnerability.

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.