Amazon Linux 2 Security Advisory: ALAS-2023-2195
Advisory Release Date: 2023-08-03 18:10 Pacific
Advisory Updated Date: 2023-08-08 22:07 Pacific
Severity:
Medium
Issue Overview:
A Gather Data Sampling (GDS) transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction (load from memory) to infer stale data from previously used vector registers on the same physical core. (CVE-2022-40982)
Affected Packages:
microcode_ctl
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update microcode_ctl to update your system.
New Packages:
i686:
microcode_ctl-2.1-47.amzn2.1.15.i686
microcode_ctl-debuginfo-2.1-47.amzn2.1.15.i686
src:
microcode_ctl-2.1-47.amzn2.1.15.src
x86_64:
microcode_ctl-2.1-47.amzn2.1.15.x86_64
microcode_ctl-debuginfo-2.1-47.amzn2.1.15.x86_64