Information disclosure in Intel products - CVE-2024-45332

Vulnerability identifier: #VU109425

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-45332

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to shared microarchitectural predictor state that influences transient execution. A local user can gain access to sensitive information.

Intel Core i7-11700
Intel Core Ultra 9
Intel Core Ultra 7
Intel Core Ultra 5
8th Generation Intel Core Processors
5th Generation Intel Xeon Scalable processors
4th Generation Intel Xeon Scalable Processors
3rd Intel Xeon E processor family
Intel Core i5-11500
Intel Core i5-11500T
Intel Core i5-11400
Intel Core i5-11400T
Intel Core i7-11700T
12th Generation Intel Core Processors
11th Generation Intel Core Processors
Intel Pentium Processor G7400/G7400T
14th Generation Intel Core Processors
13th Generation Intel Core Processors
Intel Core Ultra family
3rd Generation Intel Xeon Scalable Processors
10th Generation Intel Core Processors
Intel Xeon E Processors
2nd Generation Intel Xeon Scalable Processors
Intel Celeron Processors
Intel Pentium Gold Processor Series
PowerEdge R350
PowerEdge R250
PowerEdge T350
PowerEdge T150
PowerEdge XR12
PowerEdge XR11
PowerEdge R650
PowerEdge R750
PowerEdge R750XA
PowerEdge C6520
PowerEdge MX750c
PowerEdge R550
PowerEdge R450
PowerEdge R650XS
PowerEdge R750XS
PowerEdge T550
Dell EMC XC Core XC6520
Dell EMC XC Core XC750xa
Dell EMC XC Core XC750
Dell EMC XC Core XC650
Dell EMC XC Core XC450
PowerEdge XR4520c
PowerEdge XR4510c
Dell XC Core XC4510C
Dell XC Core XC4520C
PowerEdge T160
PowerEdge T360
PowerEdge R260
PowerEdge R360
PowerEdge R760
PowerEdge R860
PowerEdge MX760c
PowerEdge C6620
PowerEdge XE8640
Dell XC Core XC660
Dell XC Core XC660xs
PowerEdge R660
Dell XC Core XC760
Dell XC Core XC760xa
PowerEdge HS5610
PowerEdge XE9640
PowerEdge XR7620
PowerEdge XR8620t
PowerEdge XR8610t
PowerEdge XR5610
PowerEdge XE9680
PowerEdge R760xa
PowerEdge T560
PowerEdge R760xd2
PowerEdge R760xs
PowerEdge R660xs
PowerEdge HS5620
PowerEdge R960
Dell EMC NX440
PowerEdge R340
PowerEdge R240
PowerEdge T340
PowerEdge T140
PowerEdge R840
Dell EMC XC Core 6420 System
Dell EMC XC Core XC640 System
Dell EMC Storage NX3340
Dell EMC Storage NX3240
Dell EMC XC Core XC740xd System
Dell EMC XC Core XC740xd2
Dell EMC XC Core XC940 System
Dell EMC XC Core XCXR2
PowerEdge XE7420
Precision 7920 Rack
Precision 7920 XL Rack
PowerEdge R740
PowerEdge R740XD
PowerEdge R640
PowerEdge R940
PowerEdge R540
PowerEdge R440
PowerEdge T440
PowerEdge XR2
PowerEdge R740XD2
PowerEdge R940XA
PowerEdge T640
PowerEdge C6420
PowerEdge FC640
PowerEdge M640
PowerEdge M640 (for PE VRTX)
PowerEdge MX740C
PowerEdge MX840C
PowerEdge C4140
DSS 8440
PowerEdge XE7440
PowerEdge XE2420
Intel Xeon 6 processor family
Intel Atom Processors P6000
13th Generation Intel Core i7 processors
9th Generation Intel Core Processors
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME
SUSE Linux Enterprise Server 15 SP4
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Anolis OS
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
Chrome OS
IBM Qradar SIEM
microcode_ctl
intel-microcode (Ubuntu package)
intel-microcode (Debian package)
ucode-intel-debuginfo
ucode-intel
ucode-intel-debugsource

Install updates from vendor's website.

IBM Qradar SIEM - update to 7.5.0 Update Pack 13 IF01
PowerEdge R350 - update to 1.12.0
PowerEdge R250 - update to 1.12.0
PowerEdge T350 - update to 1.12.0
PowerEdge T150 - update to 1.12.0
PowerEdge XR12 - update to 1.17.1
PowerEdge XR11 - update to 1.17.1
PowerEdge R650 - update to 1.17.2
PowerEdge R750 - update to 1.17.2
PowerEdge R750XA - update to 1.17.2
PowerEdge C6520 - update to 1.17.2
PowerEdge MX750c - update to 1.17.2
PowerEdge R550 - update to 1.17.2
PowerEdge R450 - update to 1.17.2
PowerEdge R650XS - update to 1.17.2
PowerEdge R750XS - update to 1.17.2
PowerEdge T550 - update to 1.17.2
Dell EMC XC Core XC6520 - update to 1.17.2
Dell EMC XC Core XC750xa - update to 1.17.2
Dell EMC XC Core XC750 - update to 1.17.2
Dell EMC XC Core XC650 - update to 1.17.2
Dell EMC XC Core XC450 - update to 1.17.2
microcode_ctl - update to 1.17-102.83.84.1
PowerEdge XR4520c - update to 1.18.2
PowerEdge XR4510c - update to 1.18.2
Dell XC Core XC4510C - update to 1.18.2
Dell XC Core XC4520C - update to 1.18.2
PowerEdge T160 - update to 2.1.1
PowerEdge T360 - update to 2.1.1
PowerEdge R260 - update to 2.1.1
PowerEdge R360 - update to 2.1.1
microcode_ctl - addressed in versions 2.1-67.2.fc41, 2.1-70.fc42
PowerEdge R760 - update to 2.6.3
PowerEdge R860 - update to 2.6.3
PowerEdge MX760c - update to 2.6.3
PowerEdge C6620 - update to 2.6.3
PowerEdge XE8640 - update to 2.6.3
Dell XC Core XC660 - update to 2.6.3
Dell XC Core XC660xs - update to 2.6.3
PowerEdge R660 - update to 2.6.3
Dell XC Core XC760 - update to 2.6.3
Dell XC Core XC760xa - update to 2.6.3
PowerEdge HS5610 - update to 2.6.3
PowerEdge XE9640 - update to 2.6.3
PowerEdge XR7620 - update to 2.6.3
PowerEdge XR8620t - update to 2.6.3
PowerEdge XR8610t - update to 2.6.3
PowerEdge XR5610 - update to 2.6.3
PowerEdge XE9680 - update to 2.6.3
PowerEdge R760xa - update to 2.6.3
PowerEdge T560 - update to 2.6.3
PowerEdge R760xd2 - update to 2.6.3
PowerEdge R760xs - update to 2.6.3
PowerEdge R660xs - update to 2.6.3
PowerEdge HS5620 - update to 2.6.3
PowerEdge R960 - update to 2.6.3
Dell EMC NX440 - update to 2.19.0
PowerEdge R340 - update to 2.19.0
PowerEdge R240 - update to 2.19.0
PowerEdge T340 - update to 2.19.0
PowerEdge T140 - update to 2.19.0
PowerEdge R840 - update to 2.24.0
Dell EMC XC Core 6420 System - update to 2.24.0
Dell EMC XC Core XC640 System - update to 2.24.0
Dell EMC Storage NX3340 - update to 2.24.0
Dell EMC Storage NX3240 - update to 2.24.0
Dell EMC XC Core XC740xd System - update to 2.24.0
Dell EMC XC Core XC740xd2 - update to 2.24.0
Dell EMC XC Core XC940 System - update to 2.24.0
Dell EMC XC Core XCXR2 - update to 2.24.0
PowerEdge XE7420 - update to 2.24.0
Precision 7920 Rack - update to 2.24.0
Precision 7920 XL Rack - update to 2.24.0
PowerEdge R740 - update to 2.24.0
PowerEdge R740XD - update to 2.24.0
PowerEdge R640 - update to 2.24.0
PowerEdge R940 - update to 2.24.0
PowerEdge R540 - update to 2.24.0
PowerEdge R440 - update to 2.24.0
PowerEdge T440 - update to 2.24.0
PowerEdge XR2 - update to 2.24.0
PowerEdge R740XD2 - update to 2.24.0
PowerEdge R940XA - update to 2.24.0
PowerEdge T640 - update to 2.24.0
PowerEdge C6420 - update to 2.24.0
PowerEdge FC640 - update to 2.24.0
PowerEdge M640 - update to 2.24.0
PowerEdge M640 (for PE VRTX) - update to 2.24.0
PowerEdge MX740C - update to 2.24.0
PowerEdge MX840C - update to 2.24.0
PowerEdge C4140 - update to 2.24.0
DSS 8440 - update to 2.24.0
PowerEdge XE7440 - update to 2.24.0
PowerEdge XE2420 - update to 2.24.0
intel-microcode (Ubuntu package) - addressed in versions 3.20250512.0ubuntu0.16.04.1+esm1, 3.20250512.0ubuntu0.18.04.1+esm1, 3.20250512.0ubuntu0.20.04.1, 3.20250512.0ubuntu0.22.04.1, 3.20250512.0ubuntu0.24.04.1, 3.20250512.0ubuntu0.24.10.1, 3.20250512.0ubuntu0.25.04.1
intel-microcode (Debian package) - update to 3.20250512.1~deb12u1
Chrome OS - update to 140.0.7339.201
microcode_ctl - update to 20250512-1
microcode_ctl - update to 20250512-1.0.1
ucode-intel-debuginfo - update to 20250512-152.1
ucode-intel - addressed in versions 20250512-152.1, 20250512-150200.56.1
ucode-intel-debugsource - update to 20250512-152.1

• http://www.openwall.com/lists/oss-security/2025/05/13/7
• https://comsec.ethz.ch/research/microarch/branch-privilege-injection/
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html

• Indirect branch predictor vulnerability in Intel processors
• openEuler update for microcode_ctl
• SUSE update for microcode_ctl
• Multiple vulnerabilities in Dell Precision Rack BIOS
• Multiple vulnerabilities in Dell PowerEdge Server
• SUSE update for ucode-intel
• SUSE update for ucode-intel
• Debian update for intel-microcode
• Fedora 41 update for microcode_ctl
• Fedora 42 update for microcode_ctl
• Ubuntu update for intel-microcode
• SUSE update for ucode-intel
• Anolis OS update for microcode_ctl
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Google ChromeOS