ALAS2-2022-1800

Related Vulnerabilities: CVE-2022-21151  

A flaw was found in hw. Processor optimization removal or modification of security-critical code for some Intel(R) processors may potentially allow an authenticated user to enable information disclosure via local access. (CVE-2022-21151)

ALAS2-2022-1800


Amazon Linux 2 Security Advisory: ALAS-2022-1800
Advisory Release Date: 2022-05-31 23:50 Pacific
Advisory Updated Date: 2022-06-07 19:34 Pacific
Severity: Medium
References: CVE-2022-21151 

Issue Overview:

A flaw was found in hw. Processor optimization removal or modification of security-critical code for some Intel(R) processors may potentially allow an authenticated user to enable information disclosure via local access. (CVE-2022-21151)


Affected Packages:

microcode_ctl


Issue Correction:
Run yum update microcode_ctl to update your system.

New Packages:
i686:
    microcode_ctl-2.1-47.amzn2.0.12.i686
    microcode_ctl-debuginfo-2.1-47.amzn2.0.12.i686

src:
    microcode_ctl-2.1-47.amzn2.0.12.src

x86_64:
    microcode_ctl-2.1-47.amzn2.0.12.x86_64
    microcode_ctl-debuginfo-2.1-47.amzn2.0.12.x86_64