Medium ALAS2-2023-2190 1 CVE

Moderate: linux-firmware security update (Amazon Linux 2)

Published Aug 3, 2023 · Updated Aug 8, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-20593: An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Fixed packages 17

Release	Package	Fixed in
Amazon Linux · 2	iwl100-firmware	0:39.31.5.1-81.amzn2
Amazon Linux · 2	iwl1000-firmware	1:39.31.5.1-81.amzn2
Amazon Linux · 2	iwl105-firmware	0:18.168.6.1-81.amzn2
Amazon Linux · 2	iwl135-firmware	0:18.168.6.1-81.amzn2
Amazon Linux · 2	iwl2000-firmware	0:18.168.6.1-81.amzn2
Amazon Linux · 2	iwl2030-firmware	0:18.168.6.1-81.amzn2
Amazon Linux · 2	iwl3160-firmware	0:25.30.13.0-81.amzn2
Amazon Linux · 2	iwl3945-firmware	0:15.32.2.9-81.amzn2
Amazon Linux · 2	iwl4965-firmware	0:228.61.2.24-81.amzn2
Amazon Linux · 2	iwl5000-firmware	0:8.83.5.1_1-81.amzn2
Amazon Linux · 2	iwl5150-firmware	0:8.24.2.2-81.amzn2
Amazon Linux · 2	iwl6000-firmware	0:9.221.4.1-81.amzn2
Amazon Linux · 2	iwl6000g2a-firmware	0:18.168.6.1-81.amzn2
Amazon Linux · 2	iwl6000g2b-firmware	0:18.168.6.1-81.amzn2
Amazon Linux · 2	iwl6050-firmware	0:41.28.5.1-81.amzn2
Amazon Linux · 2	iwl7260-firmware	0:25.30.13.0-81.amzn2
Amazon Linux · 2	linux-firmware	0:20200421-81.git78c0348.amzn2

Vulnerabilities 1

Unscored —

CVE-2023-20593 Public exploit

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access …

AMD 2nd Gen AMD EPYC™ Processors Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT Debian Ubuntu Alpine

Jul 24, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-20593.html