Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-21151: A flaw was found in hw. Processor optimization removal or modification of security-critical code for some Intel(R) processors may potentially allow an authenticated user to enable information disclosure via local access. CVE-2022-21127: A flaw was found in hw. Incomplete cleanup in specific special register read operations for some Intel(r) Processors may allow an authenticated user to enable information disclosure via local access.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | microcode_ctl | 2:2.1-47.amzn2.0.12 |
| Amazon Linux · 2 | microcode_ctl-debuginfo | 2:2.1-47.amzn2.0.12 |
Vulnerabilities 2
-
Medium 5.5
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated…
-
Medium 5.5
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an auth…