CVE-2024-31157: 
Rocky Linux vulnerability analysis and mitigation

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors has been identified as a security vulnerability. The issue was assigned CVE-2024-31157 and was officially recorded on May 2, 2024. This vulnerability affects specific Intel processors and their UEFI firmware implementation (CVE Mitre, Intel Advisory).

The vulnerability stems from improper initialization in the UEFI firmware's OutOfBandXML module. This security flaw specifically affects certain Intel processor models and their firmware implementation. The issue requires local access and privileged user status to be exploited (CVE Mitre).

If successfully exploited, this vulnerability could lead to information disclosure. The attack requires local access and can only be executed by a privileged user, which somewhat limits its potential impact (Intel Advisory).

Intel has acknowledged the vulnerability and released an advisory (INTEL-SA-01139) addressing this security issue. Users are advised to follow Intel's security recommendations and apply any available firmware updates (Intel Advisory).