Amazon Linux 2023 Security Advisory: ALAS-2024-716
Advisory Release Date: 2024-09-12 18:29 Pacific
Advisory Updated Date: 2024-09-26 01:44 Pacific
Severity:
Important
Issue Overview:
2024-09-26: CVE-2024-22374 was added to this advisory.
Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. (CVE-2023-49141)
Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access. (CVE-2024-22374)
Affected Packages:
microcode_ctl
Issue Correction:
Run dnf update microcode_ctl --releasever 2023.5.20240903 to update your system.
New Packages:
src:
microcode_ctl-2.1-53.amzn2023.0.7.src
x86_64:
microcode_ctl-2.1-53.amzn2023.0.7.x86_64