Skip to content
OpenAdvisories
Medium ALAS2-2024-2631 1 CVE

Moderate: microcode_ctl security update (Amazon Linux 2)

Published Aug 28, 2024 · Updated Sep 5, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-22374: Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 microcode_ctl 2:2.1-47.amzn2.4.19
Amazon Linux · 2 microcode_ctl-debuginfo 2:2.1-47.amzn2.4.19

Vulnerabilities 1

  • Medium 6.5
    CVE-2024-22374

    Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially e…

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-22374.html