Skip to content
OpenAdvisories
High ALAS2023-2024-716 2 CVEs

Important: microcode_ctl security update (Amazon Linux 2023)

Published Sep 12, 2024 · Updated Sep 26, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-22374: Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access. CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2023 microcode_ctl 2:2.1-53.amzn2023.0.7

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-49141.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-22374.html