{"id":"DEBIAN-CVE-2023-28746","details":"Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","modified":"2026-09-15T09:02:37.624449999Z","published":"2024-03-14T17:15:50.533Z","upstream":["CVE-2023-28746"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-28746"}],"affected":[{"package":{"name":"intel-microcode","ecosystem":"Debian:12","purl":"pkg:deb/debian/intel-microcode?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240312.1~deb12u1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1~deb10u1","3.20240312.1~deb11u1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"intel-microcode","ecosystem":"Debian:13","purl":"pkg:deb/debian/intel-microcode?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240312.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"intel-microcode","ecosystem":"Debian:14","purl":"pkg:deb/debian/intel-microcode?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20240312.1"}]}],"versions":["0.20080131-1","0.20080220-1","0.20080401-1","0.20080910-1","0.20080910-2","0.20090330-1","0.20090927-1","0.20100826-1","0.20100914-1","0.20101123-1","0.20110428-1","0.20110915-1","0.20111110-1","0.20120606-1","1.20120606.1","1.20120606.2","1.20120606.3","1.20120606.4","1.20120606.5","1.20120606.6","1.20120606.6~bpo60+1","1.20120606.v2.1","1.20120606.v2.2","1.20120606.v2.2~bpo60+1","1.20130222.1","1.20130222.1~bpo60+1","1.20130222.3","1.20130222.4","1.20130222.5","1.20130222.6","1.20130808.1","1.20130808.2","1.20130906.1","1.20140122.1","1.20140122.1~bpo60+1","1.20140430.1","1.20140430.1~bpo60+1","1.20140624.1","1.20140624.1~bpo60+1","1.20140913.1","1.20140913.1~bpo60+1","1.20150121.1","2.20130808.1","2.20130808.1~bpo70+1","2.20130906.1","2.20130906.1~bpo70+1","2.20140122.1","2.20140122.1~bpo70+1","2.20140430.1","2.20140430.1~bpo70+1","2.20140624.1","2.20140624.1~bpo70+1","3.20140913.1","3.20140913.1~bpo70+1","3.20140913.1~bpo70+2","3.20150107.1","3.20150107.1~bpo70+1","3.20150121.1","3.20150121.1~bpo70+1","3.20151106.1","3.20151106.1~bpo7+1","3.20151106.1~bpo8+1","3.20151106.1~deb8u1","3.20151106.2","3.20160607.1","3.20160607.2","3.20160607.2~bpo8+1","3.20160714.1","3.20160714.1~bpo8+1","3.20160714.1~deb8u1","3.20160714.1~deb8u1~bpo7+1","3.20161104.1","3.20161104.1~bpo8+1","3.20161104.1~deb8u1","3.20161104.1~deb8u1~bpo7+1","3.20170511.1","3.20170511.1~bpo8+1","3.20170707.1","3.20170707.1~bpo8+1","3.20170707.1~bpo9+1","3.20170707.1~deb8u1","3.20170707.1~deb9u1","3.20171117.1","3.20171117.1~bpo8+1","3.20171117.1~bpo9+1","3.20171215.1","3.20180108.1","3.20180108.1+really20171117.1","3.20180312.1","3.20180312.1~bpo8+1","3.20180312.1~bpo9+1","3.20180425.1","3.20180425.1~bpo8+1","3.20180425.1~bpo9+1","3.20180425.1~deb8u1","3.20180425.1~deb9u1","3.20180703.1","3.20180703.2","3.20180703.2~bpo8+1","3.20180703.2~bpo9+1","3.20180703.2~deb8u1","3.20180703.2~deb9u1","3.20180807a.1","3.20180807a.1~bpo8+1","3.20180807a.1~bpo9+1","3.20180807a.1~deb8u1","3.20180807a.1~deb9u1","3.20180807a.2","3.20180807a.2~bpo8+1","3.20180807a.2~bpo9+1","3.20180807a.2~deb9u1","3.20190312.1","3.20190312.1~bpo9+1","3.20190514.1","3.20190514.1~deb8u1","3.20190514.1~deb9u1","3.20190618.1","3.20190618.1~deb8u1","3.20190618.1~deb9u1","3.20190918.1","3.20191112.1","3.20191112.1~deb10u1","3.20191112.1~deb9u1","3.20191113.1","3.20191115.1","3.20191115.1~deb10u1","3.20191115.1~deb9u1","3.20191115.2","3.20191115.2~deb10u1","3.20191115.2~deb8u1","3.20191115.2~deb9u1","3.20200508.1","3.20200520.1","3.20200609.1","3.20200609.1~deb10u1","3.20200609.1~deb9u1","3.20200609.2","3.20200609.2~deb10u1","3.20200609.2~deb8u1","3.20200609.2~deb9u1","3.20200616.1","3.20200616.1~deb10u1","3.20200616.1~deb9u1","3.20201110.1","3.20201118.1","3.20201118.1~bpo10+1","3.20201118.1~deb10u1","3.20201118.1~deb9u1","3.20210216.1","3.20210216.1~deb10u1","3.20210608.1","3.20210608.2","3.20210608.2~deb10u1","3.20210608.2~deb9u2","3.20220207.1","3.20220207.1~bpo11+1","3.20220207.1~deb10u1","3.20220207.1~deb11u1","3.20220510.1","3.20220510.1~deb10u1","3.20220510.1~deb11u1","3.20220809.1","3.20221108.1","3.20221108.2","3.20230214.1","3.20230214.1~deb10u1","3.20230214.1~deb11u1","3.20230512.1","3.20230808.1","3.20230808.1~deb10u1","3.20230808.1~deb11u1","3.20230808.1~deb12u1","3.20231114.1","3.20231114.1~deb10u1","3.20231114.1~deb11u1","3.20231114.1~deb12u1","3.20240312.1~deb10u1","3.20240312.1~deb11u1","3.20240312.1~deb12u1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.82-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.9-2"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.9-2"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"xen","ecosystem":"Debian:12","purl":"pkg:deb/debian/xen?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.5+23-ga4e5191dc0-1"}]}],"versions":["4.17.1+2-gb773c48e36-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1~deb12u1","4.17.2-1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1","4.17.3+10-g091466ba55-1.1~exp1","4.17.3+10-g091466ba55-1.1~exp2","4.17.3+10-g091466ba55-1~deb12u1","4.17.3+36-g54dacb5c02-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"xen","ecosystem":"Debian:13","purl":"pkg:deb/debian/xen?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.1-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}},{"package":{"name":"xen","ecosystem":"Debian:14","purl":"pkg:deb/debian/xen?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.1-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-28746.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"}]}