Skip to content
OpenAdvisories
Medium ALAS2-2019-1364 2 CVEs

Moderate: microcode_ctl security update (Amazon Linux 2)

Published Nov 14, 2019 · Updated Nov 16, 2019

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11139: Improper conditions check in the voltage modulation interface for some Intel Xeon Scalable Processors may allow a privileged user to potentially enable denial of service via local access. 99999: CVE-2019-11139 hw: voltage modulation technical advisory CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. 99999: CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)

Fixed packages 15

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.152-127.182.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.152-127.182.amzn2
Amazon Linux · 2 microcode_ctl 2:2.1-47.amzn2.0.4
Amazon Linux · 2 microcode_ctl-debuginfo 2:2.1-47.amzn2.0.4
Amazon Linux · 2 perf 0:4.14.152-127.182.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.152-127.182.amzn2
Amazon Linux · 2 python-perf 0:4.14.152-127.182.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.152-127.182.amzn2

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-11135.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-11139.html