CVE-2024-28956 · cross-distro fix matrix

CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affects 8 Linux releases across 14 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2024-28956 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

intel-microcode→ fixed in3.20250512.1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in5.10.244-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
linux-6.1→ fixed in6.1.140-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux-6.1
```

Source: Debian Security Tracker

intel-microcode→ fixed in3.20250512.1~deb12u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in6.1.140-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
xen→ fixed in4.17.5+72-g01140da4e8-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```

Source: Debian Security Tracker

intel-microcode→ fixed in3.20250512.1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in6.12.29-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
xen→ fixed in4.20.2+7-g1badcf5035-0+deb13u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```