CVE-2024-28956

Name	CVE-2024-28956
Description	x86: Indirect Target Selection
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1105172, 1105193

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
intel-microcode (PTS)	bullseye/non-free	3.20240813.1~deb11u1	vulnerable
	bullseye/non-free (security)	3.20250211.1~deb11u1	vulnerable
	bookworm/non-free-firmware	3.20250211.1~deb12u1	vulnerable
	bookworm/non-free-firmware (security)	3.20231114.1~deb12u1	vulnerable
	sid/non-free-firmware, trixie/non-free-firmware	3.20250211.1	vulnerable
linux (PTS)	bullseye	5.10.223-1	vulnerable
	bullseye (security)	5.10.234-1	vulnerable
	bookworm	6.1.129-1	vulnerable
	bookworm (security)	6.1.135-1	vulnerable
	sid, trixie	6.12.27-1	vulnerable
xen (PTS)	bullseye	4.14.6-1	vulnerable
	bullseye (security)	4.14.5+94-ge49571868d-1	vulnerable
	bookworm	4.17.5+23-ga4e5191dc0-1+deb12u1	vulnerable
	bookworm (security)	4.17.5+23-ga4e5191dc0-1	vulnerable
	trixie	4.20.0-1	vulnerable
	sid	4.20.0+68-g35cb38b222-1	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
intel-microcode	source	(unstable)	(unfixed)		1105172
linux	source	(unstable)	(unfixed)
xen	source	bullseye	(unfixed)	end-of-life
xen	source	(unstable)	(unfixed)		1105193

Notes

[bullseye] - xen <end-of-life> (EOLed in Bullseye)
https://xenbits.xen.org/xsa/advisory-469.html
https://www.vusec.net/projects/training-solo/
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/indirect-target-selection.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512