vulnerability

Amazon Linux AMI: CVE-2022-21216: Security patch for microcode_ctl (ALAS-2023-1715)

Severity
7
CVSS
(AV:A/AC:L/Au:M/C:C/I:C/A:C)
Published
Feb 16, 2023
Added
Feb 6, 2024
Modified
May 21, 2025

Description

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.

Solution

amazon-linux-upgrade-microcode_ctl
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.