Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel? Processors may allow an unauthenticated user to potentially enable denial of service via network access. CVE-2023-38575: Non-transparent sharing of return predictor targets between contexts in some Intel? Processors may allow an authorized user to potentially enable information disclosure via local access.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | microcode_ctl | 2:2.1-53.amzn2023.0.5 |
Vulnerabilities 2
-
Medium 6.5
Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to po…
-
Medium 5.5
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…