Information disclosure in Intel products - CVE-2024-43420

Vulnerability identifier: #VU109423

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-43420

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to shared microarchitectural predictor state that influences transient execution. A local user can gain access to sensitive information.

Intel Pentium Processor Silver Series
Intel Celeron Processor J Series
Intel Celeron Processor N Series
Alienware Aurora R12
Alienware M18 R2
Vostro 15 3530
Inspiron 15 3530
Inspiron 15 3521
Vostro 14 3430
Inspiron 14 Plus 7430
Inspiron 16 Plus 7630
Inspiron 3502
Latitude 3140
Latitude 3140 2in1
Inspiron 15 3510
Alienware m16 R1
Alienware Aurora R13
XPS 8950
Alienware m18 R1
Dell G5 5000
Latitude 5310
Alienware m15 R4
Latitude 5310 2-IN-1
Alienware m17 R4
Alienware x17 R1
Latitude 3310 2-in-1
Alienware x15 R1
XPS 13 9305
Latitude 3310
OptiPlex 5080
Inspiron 16 7610
Inspiron 15 7510
OptiPlex 7070 Ultra
Vostro 15 7510
Alienware m17 R3
Alienware Area 51m R2
Dell G15 5510
OptiPlex 5070
OptiPlex 7080
Precision 3440
OptiPlex 3070
Vostro 3690
Vostro 3890
Vostro 5880
ChengMing 3991
ChengMing 3990
Inspiron 3891
Precision 3450
Dell Precision 3431 Tower
Vostro 5890
OptiPlex 5090 Micro / OptiPlex 5090 Small Form Factor / OptiPlex 5090 Tower
Latitude 3510
Latitude 3410
OptiPlex 7090 Tower
XPS 15 9500
Latitude 7400 2-in-1
Precision 5750
Latitude 9510 2in1
Precision 5550
OptiPlex 3090 Ultra
Optiplex 7090 Ultra
Precision 5540
OptiPlex 7770 All-In-One
OptiPlex 7470 All-In-One
Latitude 7330 Rugged Laptop
OptiPlex 5270 All-In-One
Latitude 9410
Precision 3551
Precision 3550
Latitude 5410
XPS 15 7590
Latitude 3301
Latitude 3320
Latitude 5300
Latitude 5300 2-IN-1
Latitude 7200 2-in-1
Latitude 5411
Dell G15 5511
Latitude 5430 Rugged Laptop
Latitude 5510
Latitude 5511
Inspiron 5401 AIO
Inspiron 15 3511
Vostro 15 3510
Inspiron 5400/5401
OptiPlex 3280 All-in-One
Alienware m15 R6
Inspiron 7700 All-In-One
Latitude 7210 2-in-1
OptiPlex 7490 All-in-One
OptiPlex 5480 All-In-One
Latitude 7310
Latitude 3400
OptiPlex 7780 All-in-One
Vostro 3400
Latitude 3500
XPS 15 9510
OptiPlex 5490 All-In-One
Precision 7550
Precision 3640
Inspiron 3501
Precision 5560
Latitude 7410
Vostro 3500
Precision 7750
Latitude 3190 2-In-1
Precision 3650 Tower
Precision 3541
Latitude 3190
Precision 3540
Latitude 5501
Latitude 9420
Latitude 5500
Latitude 5421
Latitude 5401
Latitude 7320 Detachable
Latitude 7300
Latitude 7400
Latitude 9520
Precision 7760
Precision 7560
Precision 7540
Precision 7730
Latitude 7320
Latitude 7420
Latitude 7520
Latitude 5320
Latitude 5520
Precision 3560
Latitude 5420
Precision 7960 Tower
Precision 5860 Tower
OptiPlex 3090
XPS 8940
OptiPlex 3080
Vostro 15 5510
Vostro 14 5410
Vostro 3681
Vostro 3881
Vostro 3888
Inspiron 15 5510/5518
Inspiron 14 5410 2-in-1
Inspiron 14 5410/5418
XPS 13 9310 2-in-1
Inspiron 13 5310
Vostro 13 5310
Precision 3930 Rack
Dell Precision 5820 Tower
Dell Precision 7820 Tower
Dell Precision 7920 Tower
XPS 13 9310
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME
SUSE Linux Enterprise Server 15 SP4
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Anolis OS
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
Chrome OS
IBM Qradar SIEM
microcode_ctl
intel-microcode (Ubuntu package)
intel-microcode (Debian package)
ucode-intel-debuginfo
ucode-intel
ucode-intel-debugsource
OptiPlex 7071
Precision 3240 Compact

Install updates from vendor's website.

IBM Qradar SIEM - update to 7.5.0 Update Pack 13 IF01
Alienware Aurora R12 - update to 1.1.29
Alienware M18 R2 - update to 1.14.0
microcode_ctl - update to 1.17-102.83.84.1
Vostro 15 3530 - update to 1.20.0
Inspiron 15 3530 - update to 1.20.0
Inspiron 15 3521 - update to 1.20.0
Vostro 14 3430 - update to 1.20.0
Inspiron 14 Plus 7430 - update to 1.21.0
Inspiron 16 Plus 7630 - update to 1.21.0
Inspiron 3502 - update to 1.22.0
Latitude 3140 - update to 1.24.0
Latitude 3140 2in1 - update to 1.24.0
Inspiron 15 3510 - update to 1.25.0
Alienware m16 R1 - update to 1.26.0
Alienware Aurora R13 - update to 1.26.0
XPS 8950 - update to 1.26.0
Alienware m18 R1 - update to 1.26.0
Dell G5 5000 - update to 1.27.0
Latitude 5310 - update to 1.27.0
Alienware m15 R4 - update to 1.27.0
Latitude 5310 2-IN-1 - update to 1.27.0
Alienware m17 R4 - update to 1.27.0
Alienware x17 R1 - update to 1.28.0
Latitude 3310 2-in-1 - update to 1.28.0
Alienware x15 R1 - update to 1.28.0
XPS 13 9305 - update to 1.29.0
Latitude 3310 - update to 1.29.0
OptiPlex 5080 - update to 1.29.0
Inspiron 16 7610 - update to 1.30.0
Inspiron 15 7510 - update to 1.30.0
OptiPlex 7070 Ultra - update to 1.30.0
Vostro 15 7510 - update to 1.30.0
Alienware m17 R3 - update to 1.31.0
Alienware Area 51m R2 - update to 1.31.0
Dell G15 5510 - update to 1.31.0
OptiPlex 7071 - update to 1.32.0
OptiPlex 5070 - update to 1.32.0
OptiPlex 7080 - update to 1.32.0
Precision 3440 - update to 1.32.0
OptiPlex 3070 - update to 1.32.0
Vostro 3690 - update to 1.32.0
Vostro 3890 - update to 1.32.0
Vostro 5880 - update to 1.32.0
ChengMing 3991 - update to 1.32.0
ChengMing 3990 - update to 1.32.0
Inspiron 3891 - update to 1.32.0
Precision 3450 - update to 1.33.0
Dell Precision 3431 Tower - update to 1.33.0
Vostro 5890 - update to 1.33.0
OptiPlex 5090 Micro / OptiPlex 5090 Small Form Factor / OptiPlex 5090 Tower - update to 1.33.0
Latitude 3510 - update to 1.33.0
Latitude 3410 - update to 1.33.0
OptiPlex 7090 Tower - update to 1.33.0
Precision 3240 Compact - update to 1.33.0
XPS 15 9500 - update to 1.34.0
Latitude 7400 2-in-1 - update to 1.34.0
Precision 5750 - update to 1.34.0
Latitude 9510 2in1 - update to 1.34.0
Precision 5550 - update to 1.34.0
OptiPlex 3090 Ultra - update to 1.34.0
Optiplex 7090 Ultra - update to 1.34.0
Precision 5540 - update to 1.35.0
OptiPlex 7770 All-In-One - update to 1.35.0
OptiPlex 7470 All-In-One - update to 1.35.0
Latitude 7330 Rugged Laptop - update to 1.35.0
OptiPlex 5270 All-In-One - update to 1.35.0
Latitude 9410 - update to 1.35.0
Precision 3551 - update to 1.35.0
Precision 3550 - update to 1.35.0
Latitude 5410 - update to 1.35.0
XPS 15 7590 - update to 1.35.0
Latitude 3301 - update to 1.35.0
Latitude 3320 - update to 1.35.0
Latitude 5300 - update to 1.35.0
Latitude 5300 2-IN-1 - update to 1.35.0
Latitude 7200 2-in-1 - update to 1.35.0
Latitude 5411 - update to 1.35.0
Dell G15 5511 - update to 1.35.0
Latitude 5430 Rugged Laptop - update to 1.35.0
Latitude 5510 - update to 1.35.0
Latitude 5511 - update to 1.35.0
Inspiron 5401 AIO - update to 1.36.0
Inspiron 15 3511 - update to 1.36.0
Vostro 15 3510 - update to 1.36.0
Inspiron 5400/5401 - update to 1.36.0
OptiPlex 3280 All-in-One - update to 1.36.0
Alienware m15 R6 - update to 1.36.0
Inspiron 7700 All-In-One - update to 1.36.0
Latitude 7210 2-in-1 - update to 1.36.0
OptiPlex 7490 All-in-One - update to 1.37.0
OptiPlex 5480 All-In-One - update to 1.37.0
Latitude 7310 - update to 1.37.0
Latitude 3400 - update to 1.37.0
OptiPlex 7780 All-in-One - update to 1.37.0
Vostro 3400 - update to 1.37.0
Latitude 3500 - update to 1.37.0
XPS 15 9510 - update to 1.37.0
OptiPlex 5490 All-In-One - update to 1.37.0
Precision 7550 - update to 1.37.0
Precision 3640 - update to 1.37.0
Inspiron 3501 - update to 1.37.0
Precision 5560 - update to 1.37.0
Latitude 7410 - update to 1.37.0
Vostro 3500 - update to 1.37.0
Precision 7750 - update to 1.37.0
Latitude 3190 2-In-1 - update to 1.38.0
Precision 3650 Tower - update to 1.38.0
Precision 3541 - update to 1.38.0
Latitude 3190 - update to 1.38.0
Precision 3540 - update to 1.38.0
Latitude 5501 - update to 1.38.0
Latitude 9420 - update to 1.38.0
Latitude 5500 - update to 1.38.0
Latitude 5421 - update to 1.38.0
Latitude 5401 - update to 1.38.0
Latitude 7320 Detachable - update to 1.39.0
Latitude 7300 - update to 1.39.0
Latitude 7400 - update to 1.39.0
Latitude 9520 - update to 1.39.0
Precision 7760 - update to 1.39.0
Precision 7560 - update to 1.39.0
Precision 7540 - update to 1.39.1
Precision 7730 - update to 1.40.1
Latitude 7320 - update to 1.42.0
Latitude 7420 - update to 1.42.0
Latitude 7520 - update to 1.42.0
Latitude 5320 - update to 1.43.0
Latitude 5520 - update to 1.43.0
Precision 3560 - update to 1.43.0
Latitude 5420 - update to 1.45.0
microcode_ctl - addressed in versions 2.1-67.2.fc41, 2.1-70.fc42
Precision 7960 Tower - update to 2.10.0
Precision 5860 Tower - update to 2.10.0
OptiPlex 3090 - update to 2.23.0
XPS 8940 - update to 2.26.0
OptiPlex 3080 - update to 2.29.0
Vostro 15 5510 - update to 2.32.0
Vostro 14 5410 - update to 2.32.0
Vostro 3681 - update to 2.32.0
Vostro 3881 - update to 2.32.0
Vostro 3888 - update to 2.32.0
Inspiron 15 5510/5518 - update to 2.32.0
Inspiron 14 5410 2-in-1 - update to 2.32.0
Inspiron 14 5410/5418 - update to 2.32.0
XPS 13 9310 2-in-1 - update to 2.32.0
Inspiron 13 5310 - update to 2.33.0
Vostro 13 5310 - update to 2.33.0
Precision 3930 Rack - update to 2.35.0
Dell Precision 5820 Tower - update to 2.42.0
Dell Precision 7820 Tower - update to 2.46.0
Dell Precision 7920 Tower - update to 2.46.0
XPS 13 9310 - update to 3.30.0
intel-microcode (Ubuntu package) - addressed in versions 3.20250512.0ubuntu0.16.04.1+esm1, 3.20250512.0ubuntu0.18.04.1+esm1, 3.20250512.0ubuntu0.20.04.1, 3.20250512.0ubuntu0.22.04.1, 3.20250512.0ubuntu0.24.04.1, 3.20250512.0ubuntu0.24.10.1, 3.20250512.0ubuntu0.25.04.1
intel-microcode (Debian package) - update to 3.20250512.1~deb12u1
Chrome OS - update to 140.0.7339.201
microcode_ctl - update to 20250512-1
microcode_ctl - update to 20250512-1.0.1
ucode-intel-debuginfo - update to 20250512-152.1
ucode-intel - addressed in versions 20250512-152.1, 20250512-150200.56.1
ucode-intel-debugsource - update to 20250512-152.1

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html

• Indirect branch predictor vulnerability in Intel processors
• openEuler update for microcode_ctl
• SUSE update for microcode_ctl
• Multiple vulnerabilities in Dell Client Platform BIOS
• SUSE update for ucode-intel
• SUSE update for ucode-intel
• Debian update for intel-microcode
• Fedora 41 update for microcode_ctl
• Fedora 42 update for microcode_ctl
• Ubuntu update for intel-microcode
• SUSE update for ucode-intel
• Anolis OS update for microcode_ctl
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Google ChromeOS