CVE-2022-40982 - Gather Data Sampling - Downfall

Publication Date: 2023/08/08 1:00 PM PDT

AWS is aware of CVE-2022-40982, also known as “Gather Data Sampling” (GDS) or “Downfall”. AWS customers’ data and instances are not affected by this issue, and no customer action is required. AWS has designed and implemented its infrastructure with protections against this class of issues. Amazon EC2 instances, including Lambda, Fargate, and other AWS-managed compute and container services protect customer data against GDS through microcode and software based mitigations.

Security-related questions or concerns can …

action amazon amazon ec2 aware aws class customer customers cve data ec2 infrastructure issue