CVE-2020-24512: Infoleak
Certain optimizations on some Intel processors target “trivial data value” cache-lines, such as all-zero value cache-lines. Such optimizations may lead to changes in cache-allocation or write-back behavior for such cache-lines. It may be possible for a local attacker to distinguish some cases of trivial-data-cache-lines from non-trivial-data cache-lines by inferring cache state using cache timing methods.
Other sources
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-24512?
CVE-2020-24512 is a vulnerability that allows an authenticated user to potentially enable information disclosure via local access on some Intel(R) Processors.
How severe is CVE-2020-24512?
CVE-2020-24512 has a severity rating of low (3.3).
What software is affected by CVE-2020-24512?
The affected software includes Intel Microcode, Debian Debian Linux 10.0, Netapp Fas/Aff Bios, Netapp Hci Compute Node Bios, and Netapp Solidfire Bios.
How can I fix CVE-2020-24512?
To fix CVE-2020-24512, update to the recommended versions of the affected software listed in the references.