Skip to content
OpenAdvisories
High ALAS2-2025-2994 5 CVEs

Important: microcode_ctl security update (Amazon Linux 2)

Published Sep 8, 2025 · Updated Sep 16, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2025-20103: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html CVE-2025-20054: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html CVE-2024-45332: Potential security vulnerabilities in some Intel(r) Processor indirect branch predictors may allow information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html CVE-2024-28956: A potential security vulnerability in some Intel(r) Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability. Info: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 microcode_ctl 2:2.1-47.amzn2.4.24
Amazon Linux · 2 microcode_ctl-debuginfo 2:2.1-47.amzn2.4.24

Vulnerabilities 5

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-28956.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-45332.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-20054.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-20103.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-20109.html