CVE-2020-24511: 
Rocky Linux vulnerability analysis and mitigation

Improper isolation of shared resources in some Intel(R) Processors was identified as CVE-2020-24511, which allows an authenticated user to potentially enable information disclosure via local access. The vulnerability was disclosed in 2020 and affects various Intel processor models (Intel Advisory).

The vulnerability has a CVSS score of 5.6 (MEDIUM) with a vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N. This indicates that the vulnerability requires local access, high attack complexity, and low privileges, but could result in high confidentiality impact (NetApp Advisory).

Successful exploitation of this vulnerability could lead to disclosure of sensitive information through local access. The vulnerability specifically affects certain processor models, with particular impact noted on AFF A400/FAS8300/FAS8700 systems (NetApp Advisory).

Intel released firmware updates to mitigate the vulnerability. Various vendors have provided patches, including Debian which released version 3.20210608.2~deb10u1 for the stable distribution (buster). For affected systems, microcode updates are available through vendor-specific channels (Debian Advisory, Intel Advisory).