Amazon Linux 2023 Security Advisory: ALAS-2024-559
Advisory Release Date: 2024-03-13 11:00 Pacific
Advisory Updated Date: 2024-03-13 11:00 Pacific
Severity:
Medium
Issue Overview:
Non-transparent sharing of return predictor targets between contexts in some Intel® Processors may allow an authorized user to potentially enable information disclosure via local access. (CVE-2023-38575)
Protection mechanism failure of bus lock regulator for some Intel® Processors may allow an unauthenticated user to potentially enable denial of service via network access. (CVE-2023-39368)
Affected Packages:
microcode_ctl
Issue Correction:
Run dnf update microcode_ctl --releasever 2023.3.20240312 to update your system.
New Packages:
src:
microcode_ctl-2.1-53.amzn2023.0.5.src
x86_64:
microcode_ctl-2.1-53.amzn2023.0.5.x86_64