Amazon Linux 2023 Security Advisory: ALAS-2023-287
Advisory Release Date: 2023-08-03 20:26 Pacific
Advisory Updated Date: 2023-08-09 23:15 Pacific
Severity:
Medium
Issue Overview:
A Gather Data Sampling (GDS) transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction (load from memory) to infer stale data from previously used vector registers on the same physical core. (CVE-2022-40982)
Affected Packages:
microcode_ctl
Issue Correction:
Run dnf update microcode_ctl --releasever 2023.1.20230809 to update your system.
New Packages:
src:
microcode_ctl-2.1-53.amzn2023.0.2.src
x86_64:
microcode_ctl-2.1-53.amzn2023.0.2.x86_64