Amazon Linux 2023 Security Advisory: ALAS2023-2024-716
Advisory Released Date: 2024-10-01
Advisory Updated Date: 2024-10-01
Severity:
Important
Issue Overview:
Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. (CVE-2023-49141)
Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access. (CVE-2024-22374)
Affected Packages:
microcode_ctl
Issue Correction:
Run dnf update microcode_ctl --releasever 2023.5.20240903 to update your system.
New Packages:
src:
microcode_ctl-2.1-53.amzn2023.0.7.src
x86_64:
microcode_ctl-2.1-53.amzn2023.0.7.x86_64
Changelog:
2024-09-26: CVE-2024-22374 was added to this advisory.