GCP-2025-025

<p><strong>Published: </strong>2025-05-13</p><h3 class="hide-from-toc" data-text="Description" id="description_12" tabindex="-1">Description</h3><table> <thead> <tr> <th width="70%">Description</th> <th>Severity</th> <th>Notes</th> </tr> </thead> <tbody> <tr> <td><p>Intel has notified Google about a new side channel vulnerability affecting the following Intel processors: CascadeLake, Ice Lake XeonSP, Ice Lake XeonD, Sapphire Rapids and Emerald Rapids.</p> <p>Google has applied fixes to the affected assets, including Google Cloud, to ensure customers are protected. At this time, no evidence of exploitation has been found or reported to Google.</p> <h4 data-text="What should I do?" id="what-should-i-do_11" tabindex="-1">What should I do?</h4> <p>No customer action is required. Fixes have already been applied to the Google server fleet to protect customers.</p> <h4 data-text="What vulnerabilities are being addressed?" id="what-vulnerabilities-are-being-addressed_8" tabindex="-1">What vulnerabilities are being addressed?</h4> <p><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45332">CVE-2024-45332</a>. For more information, see <a href="https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html">Intel advisory INTEL-SA-01247</a>.</p> <h4 data-text="We're here to help" id="were-here-to-help" tabindex="-1">We're here to help</h4> <p>If you have any questions or require assistance, please contact <a href="https://docs.cloud.google.com/support/docs/overview">Cloud Customer Care</a> and reference issue number 417536835.</p> </td> <td>High</td> <td> <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45332">CVE-2024-45332</a> </td> </tr> </tbody> </table>