Skip to content
OpenAdvisories
Medium ALAS2-2023-2195 2 CVEs

Moderate: microcode_ctl security update (Amazon Linux 2)

Published Aug 3, 2023 · Updated Mar 7, 2025

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access. CVE-2022-40982: Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 microcode_ctl 2:2.1-47.amzn2.1.15
Amazon Linux · 2 microcode_ctl-debuginfo 2:2.1-47.amzn2.1.15

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-40982.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-23908.html