Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-40982: A Gather Data Sampling (GDS) transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction (load from memory) to infer stale data from previously used vector registers on the same physical core.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | microcode_ctl | 2:2.1-53.amzn2023.0.2 |
Vulnerabilities 1
-
Medium 6.5
Information exposure through microarchitectural state after transient execution in certain vector execution units for s…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-40982.html