Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-1125: A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel. 1724389: CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.133-113.112.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.133-113.112.amzn2 |
Vulnerabilities 1
-
Medium 5.6CVE-2019-1125 Public exploit
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-1125.html