GCP-2025-024

<p><strong>Published: </strong>2025-05-12</p><p><strong>Updated: </strong>2025-05-13</p><h3 class="hide-from-toc" data-text="Description" id="description_13" tabindex="-1">Description</h3><table> <thead> <tr> <th width="70%">Description</th> <th>Severity</th> <th>Notes</th> </tr> </thead> <tbody> <tr> <td> <p><strong>2025-05-13 Update:</strong> If you have any questions or require assistance, please contact <a href="https://docs.cloud.google.com/support/docs/overview">Cloud Customer Care</a> and reference issue number 417458390.</p> <hr/> <p>Intel has notified Google about a new speculative execution vulnerability affecting Intel Cascade Lake processors and Intel Ice Lake processors.</p> <p>Google has applied fixes to the affected assets, including Google Cloud, to ensure customers are protected. At this time, no evidence of exploitation has been found or reported to Google.</p> <h4 data-text="What should I do?" id="what-should-i-do_12" tabindex="-1">What should I do?</h4> <p>No customer action is required. Mitigations have already been applied to the Google server fleet.</p> <p>Further mitigations from Intel Original Equipment Manufacturers (OEMs) and other operating system partners will be deployed as soon as they become available to mitigate the same-mode Indirect Target Selection (ITS) vulnerability.</p> <p>After the operating system mitigations have been applied, customers with long-running 3rd generation or later VMs may experience some unintended performance degradation</p> <h4 data-text="What vulnerabilities are being addressed?" id="what-vulnerabilities-are-being-addressed_9" tabindex="-1">What vulnerabilities are being addressed?</h4> <p>CVE-2024-28956. For more information, see <a href="https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/indirect-target-selection.html">Intel security advisory INTEL-SA-01153</a>.</p> </td> <td>High</td> <td> <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956">CVE-2024-28956</a> </td> </tr> </tbody> </table>