Medium ALAS2-2023-2232 1 CVE

Moderate: kernel security update (Amazon Linux 2)

Published Aug 31, 2023 · Updated Sep 7, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-20588: A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

Fixed packages 14

Release	Package	Fixed in
Amazon Linux · 2	kernel	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-debuginfo	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-debuginfo-common-aarch64	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-debuginfo-common-x86_64	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-devel	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-headers	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-livepatch-4.14.322-244.539	0:1.0-0.amzn2
Amazon Linux · 2	kernel-tools	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-tools-debuginfo	0:4.14.322-244.539.amzn2
Amazon Linux · 2	kernel-tools-devel	0:4.14.322-244.539.amzn2
Amazon Linux · 2	perf	0:4.14.322-244.539.amzn2
Amazon Linux · 2	perf-debuginfo	0:4.14.322-244.539.amzn2
Amazon Linux · 2	python-perf	0:4.14.322-244.539.amzn2
Amazon Linux · 2	python-perf-debuginfo	0:4.14.322-244.539.amzn2

Vulnerabilities 1

Unscored —

CVE-2023-20588 EPSS 11%

Speculative Leaks

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

AMD Athlon™ 3000 Series Processors with Radeon™ Graphics Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics Debian Ubuntu Alpine

Aug 8, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-20588.html