Skip to content
OpenAdvisories
Medium ALAS2-2022-1800 2 CVEs

Moderate: microcode_ctl security update (Amazon Linux 2)

Published May 31, 2022 · Updated Sep 1, 2022

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-21151: A flaw was found in hw. Processor optimization removal or modification of security-critical code for some Intel(R) processors may potentially allow an authenticated user to enable information disclosure via local access. CVE-2022-21127: A flaw was found in hw. Incomplete cleanup in specific special register read operations for some Intel(r) Processors may allow an authenticated user to enable information disclosure via local access.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 microcode_ctl 2:2.1-47.amzn2.0.12
Amazon Linux · 2 microcode_ctl-debuginfo 2:2.1-47.amzn2.0.12

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-21127.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-21151.html