Skip to content
OpenAdvisories
Medium ALAS2-2024-2491 2 CVEs

Moderate: microcode_ctl security update (Amazon Linux 2)

Published Mar 12, 2024 · Updated Mar 12, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel? Processors may allow an unauthenticated user to potentially enable denial of service via network access. CVE-2023-38575: Non-transparent sharing of return predictor targets between contexts in some Intel? Processors may allow an authorized user to potentially enable information disclosure via local access.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 microcode_ctl 2:2.1-47.amzn2.4.17
Amazon Linux · 2 microcode_ctl-debuginfo 2:2.1-47.amzn2.4.17

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-38575.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39368.html