Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access. CVE-2022-40982: Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | microcode_ctl | 2:2.1-47.amzn2.1.15 |
| Amazon Linux · 2 | microcode_ctl-debuginfo | 2:2.1-47.amzn2.1.15 |
Vulnerabilities 2
-
Medium 6.5
Information exposure through microarchitectural state after transient execution in certain vector execution units for s…
-
Medium 6.0
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to pote…