Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-20103: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html CVE-2025-20054: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html CVE-2024-45332: Potential security vulnerabilities in some Intel(r) Processor indirect branch predictors may allow information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html CVE-2024-28956: A potential security vulnerability in some Intel(r) Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability. Info: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | microcode_ctl | 2:2.1-47.amzn2.4.24 |
| Amazon Linux · 2 | microcode_ctl-debuginfo | 2:2.1-47.amzn2.4.24 |
Vulnerabilities 4
-
Medium 6.5
Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to pot…
-
Medium 6.5
Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated use…
-
Medium 5.6
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) …
-
Medium 5.6
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…