Intel SA-01247: Transient Execution Info Leak in Intel Core/Xeon Processors (CVE-2024-43420, 2025-20623, 2024-45332)

Critical Vulnerability Information Vulnerability Overview Intel ID: INTEL-SA-01247 Category: Hardware Impact: Information Disclosure Severity: Medium Vulnerability Details CVE-2024-43420 Description: Due to shared microarchitectural predictor state affecting transient execution, certain Intel Atom® processors may allow authenticated users to potentially enable information disclosure via local access. CVSS Base Score: 4.0 (Medium) CVE-2025-20623 Description: Due to shared microarchitectural predictor state affecting transient execution, certain Intel Core™ processors may allow authenticated users to potentially enable information disclosure via local access. CVSS Base Score: 3.1 (Low) CVE-2024-45332 Description: Due to shared microarchitectural predictor state affecting transient execution in indirect branches, certain Intel Xeon® processors may allow authenticated users to potentially enable information disclosure via local access. CVSS Base Score: 3.1 (Low) Affected Products Product Families: Includes 12th to 14th generation Intel Core™ processors, Intel Pentium® Gold processors, Intel Celeron® processors, Intel Xeon® scalable processors, and others. Vertical Segments: Covers desktop, mobile, embedded, server, and workstation platforms. Recommended Actions Intel recommends that users of affected Intel processors update to the latest versions provided by their system manufacturers to address these issues. Acknowledgments For CVE-2024-45332, Intel thanks Sandro Rieggel, Johannes Wilker, and Kaveh Razavi for their contributions. For CVE-2024-43420 and CVE-2025-20623, Intel thanks Alyssa Milburn, Ke Sun, and Jason Kilman for their contributions.

Goal Reached Thanks to every supporter — we hit 100%!

Intel SA-01247: Transient Execution Info Leak in Intel Core/Xeon Processors (CVE-2024-43420, 2025-20623, 2024-45332)