CVE-2023-28746 Information disclosure in Intel(R) Atom(R) Processors
Authenticated local attackers can exploit microarchitectural state to disclose sensitive information on Intel Atom processors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-28746?
CVE-2023-28746 is a medium-severity vulnerability in Intel(R) Atom(R) Processors, published on 14 Mar 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Weakness: CWE-1342
Which versions are affected by CVE-2023-28746?
Linux distribution packages (1)
kernel-source openSUSE:Tumbleweed | All versions | 6.8.1-1.1 |
How do I fix CVE-2023-28746?
Apply the vendor's patch.
Is CVE-2023-28746 being exploited?
There is no known exploitation of CVE-2023-28746 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2023-28746, BELL-CVE-2023-28746, DEBIAN-CVE-2023-28746, GHSA-36c8-x5g7-w9x4, UBUNTU-CVE-2023-28746, openSUSE-SU-2024:13785-1.