[ALAS2-2024-2443] Amazon Linux 2 2017.12 - ALAS2-2024-2443: important priority package update for kernel
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities:
CVE-2023-6931:
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().
We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.
CVE-2023-6546:
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.
CVE-2023-6040:
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within nf_tables_newtable
function enables an attacker to achieve out-of-bounds access.
- ID
- ALAS2-2024-2443
- Severity
- important
- URL
- https://alas.aws.amazon.com/AL2/ALAS-2024-2443.html
- Published
-
2024-02-01T19:57:00
(7 months ago) - Modified
-
2024-02-01T19:57:00
(7 months ago) - Rights
- Amazon Linux Security Team
- Other Advisories
-
-
ALAS-2024-1912
-
ALSA-2024:1607
-
DSA-5593-1
-
DSA-5594-1
-
ELSA-2024-12270
-
ELSA-2024-12606
-
ELSA-2024-1607
-
ELSA-2024-2394
-
RHSA-2024:1607
-
RHSA-2024:1612
-
RHSA-2024:1614
-
RLSA-2024:1607
-
SSA:2024-157-01
-
SUSE-SU-2024:0110-1
-
SUSE-SU-2024:0113-1
-
SUSE-SU-2024:0115-1
-
SUSE-SU-2024:0117-1
-
SUSE-SU-2024:0118-1
-
SUSE-SU-2024:0120-1
-
SUSE-SU-2024:0129-1
-
SUSE-SU-2024:0141-1
-
SUSE-SU-2024:0153-1
-
SUSE-SU-2024:0154-1
-
SUSE-SU-2024:0156-1
-
SUSE-SU-2024:0160-1
-
SUSE-SU-2024:0463-1
-
SUSE-SU-2024:0468-1
-
SUSE-SU-2024:0469-1
-
SUSE-SU-2024:0474-1
-
SUSE-SU-2024:0476-1
-
SUSE-SU-2024:0478-1
-
SUSE-SU-2024:0483-1
-
SUSE-SU-2024:0484-1
-
SUSE-SU-2024:0514-1
-
SUSE-SU-2024:0515-1
-
SUSE-SU-2024:0516-1
-
SUSE-SU-2024:1677-1
-
SUSE-SU-2024:1679-1
-
SUSE-SU-2024:1680-1
-
SUSE-SU-2024:1682-1
-
SUSE-SU-2024:1685-1
-
SUSE-SU-2024:1686-1
-
SUSE-SU-2024:1692-1
-
SUSE-SU-2024:1694-1
-
SUSE-SU-2024:1695-1
-
SUSE-SU-2024:1696-1
-
SUSE-SU-2024:1705-1
-
SUSE-SU-2024:1706-1
-
SUSE-SU-2024:1707-1
-
SUSE-SU-2024:1708-1
-
SUSE-SU-2024:1709-1
-
SUSE-SU-2024:1711-1
-
SUSE-SU-2024:1712-1
-
SUSE-SU-2024:1713-1
-
SUSE-SU-2024:1719-1
-
SUSE-SU-2024:1720-1
-
SUSE-SU-2024:1723-1
-
SUSE-SU-2024:1726-1
-
SUSE-SU-2024:1729-1
-
SUSE-SU-2024:1731-1
-
SUSE-SU-2024:1732-1
-
SUSE-SU-2024:1735-1
-
SUSE-SU-2024:1736-1
-
SUSE-SU-2024:1739-1
-
SUSE-SU-2024:1740-1
-
SUSE-SU-2024:1742-1
-
SUSE-SU-2024:1746-1
-
SUSE-SU-2024:1748-1
-
SUSE-SU-2024:1749-1
-
SUSE-SU-2024:1751-1
-
SUSE-SU-2024:1753-1
-
SUSE-SU-2024:1757-1
-
SUSE-SU-2024:1759-1
-
SUSE-SU-2024:2092-1
-
SUSE-SU-2024:2099-1
-
SUSE-SU-2024:2100-1
-
SUSE-SU-2024:2115-1
-
SUSE-SU-2024:2120-1
-
SUSE-SU-2024:2130-1
-
SUSE-SU-2024:2145-1
-
SUSE-SU-2024:2148-1
-
SUSE-SU-2024:2162-1
-
SUSE-SU-2024:2163-1
-
SUSE-SU-2024:2166-1
-
SUSE-SU-2024:2202-1
-
SUSE-SU-2024:2205-1
-
SUSE-SU-2024:2207-1
-
SUSE-SU-2024:2208-1
-
SUSE-SU-2024:2337-1
-
SUSE-SU-2024:2343-1
-
SUSE-SU-2024:2373-1
-
SUSE-SU-2024:2382-1
-
SUSE-SU-2024:2446-1
-
SUSE-SU-2024:2447-1
-
SUSE-SU-2024:2472-1
-
SUSE-SU-2024:2558-1
-
SUSE-SU-2024:2722-1
-
SUSE-SU-2024:2740-1
-
SUSE-SU-2024:2751-1
-
SUSE-SU-2024:2755-1
-
SUSE-SU-2024:2821-1
-
SUSE-SU-2024:2824-1
-
SUSE-SU-2024:2840-1
-
SUSE-SU-2024:2850-1
-
SUSE-SU-2024:2851-1
-
SUSE-SU-2024:3034-1
-
SUSE-SU-2024:3037-1
-
SUSE-SU-2024:3043-1
-
USN-6602-1
-
USN-6603-1
-
USN-6604-1
-
USN-6604-2
-
USN-6605-1
-
USN-6605-2
-
USN-6606-1
-
USN-6607-1
-
USN-6608-1
-
USN-6608-2
-
USN-6609-1
-
USN-6609-2
-
USN-6609-3
-
USN-6628-1
-
USN-6628-2
-
USN-6635-1
-
Source | # ID | Name | URL |
---|---|---|---|
CVE | CVE-2023-6040 |
|
|
CVE | CVE-2023-6546 |
|
|
CVE | CVE-2023-6931 |
|
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/amazonlinux/python-perf?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/python-perf?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/python-perf-debuginfo?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/python-perf-debuginfo?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/perf?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/perf?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/perf-debuginfo?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/perf-debuginfo?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-tools?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-tools?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-tools-devel?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-tools-devel?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-tools-debuginfo?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-tools-debuginfo?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-livepatch-4.14.336-255.557?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 1.0-0.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-headers?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-headers?arch=i686&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | i686 | |
Affected | pkg:rpm/amazonlinux/kernel-headers?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-devel?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-devel?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-debuginfo?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-debuginfo?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 | |
Affected | pkg:rpm/amazonlinux/kernel-debuginfo-common-x86_64?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | x86_64 | |
Affected | pkg:rpm/amazonlinux/kernel-debuginfo-common-aarch64?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
![]() |
< 4.14.336-255.557.amzn2 | amazonlinux-2 | aarch64 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |