vulnerability
Amazon Linux 2023: CVE-2025-24305: Important priority package update for microcode_ctl
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:M/Au:M/C:C/I:C/A:N) | Aug 12, 2025 | Sep 16, 2025 | Sep 16, 2025 |
Severity
6
CVSS
(AV:L/AC:M/Au:M/C:C/I:C/A:N)
Published
Aug 12, 2025
Added
Sep 16, 2025
Modified
Sep 16, 2025
Description
Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
Solution
amazon-linux-2023-upgrade-microcode-ctl
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.