ALASKERNEL-5.10-2022-024

Amazon Linux 2 Security Advisory: ALASKERNEL-5.10-2022-024
Advisory Release Date: 2022-12-12 19:59 Pacific
Advisory Updated Date: 2024-02-01 20:10 Pacific
Severity: Important
Issue Overview:

2024-02-01: CVE-2022-47946 was added to this advisory.

A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect. (CVE-2022-3169)

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system. (CVE-2022-4139)

An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq. (CVE-2022-47946)


Affected Packages:

kernel


Note:

This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update kernel to update your system.

New Packages:
aarch64:
    kernel-5.10.157-139.675.amzn2.aarch64
    kernel-headers-5.10.157-139.675.amzn2.aarch64
    kernel-debuginfo-common-aarch64-5.10.157-139.675.amzn2.aarch64
    perf-5.10.157-139.675.amzn2.aarch64
    perf-debuginfo-5.10.157-139.675.amzn2.aarch64
    python-perf-5.10.157-139.675.amzn2.aarch64
    python-perf-debuginfo-5.10.157-139.675.amzn2.aarch64
    kernel-tools-5.10.157-139.675.amzn2.aarch64
    kernel-tools-devel-5.10.157-139.675.amzn2.aarch64
    kernel-tools-debuginfo-5.10.157-139.675.amzn2.aarch64
    bpftool-5.10.157-139.675.amzn2.aarch64
    bpftool-debuginfo-5.10.157-139.675.amzn2.aarch64
    kernel-devel-5.10.157-139.675.amzn2.aarch64
    kernel-debuginfo-5.10.157-139.675.amzn2.aarch64
    kernel-livepatch-5.10.157-139.675-1.0-0.amzn2.aarch64

i686:
    kernel-headers-5.10.157-139.675.amzn2.i686

src:
    kernel-5.10.157-139.675.amzn2.src

x86_64:
    kernel-5.10.157-139.675.amzn2.x86_64
    kernel-headers-5.10.157-139.675.amzn2.x86_64
    kernel-debuginfo-common-x86_64-5.10.157-139.675.amzn2.x86_64
    perf-5.10.157-139.675.amzn2.x86_64
    perf-debuginfo-5.10.157-139.675.amzn2.x86_64
    python-perf-5.10.157-139.675.amzn2.x86_64
    python-perf-debuginfo-5.10.157-139.675.amzn2.x86_64
    kernel-tools-5.10.157-139.675.amzn2.x86_64
    kernel-tools-devel-5.10.157-139.675.amzn2.x86_64
    kernel-tools-debuginfo-5.10.157-139.675.amzn2.x86_64
    bpftool-5.10.157-139.675.amzn2.x86_64
    bpftool-debuginfo-5.10.157-139.675.amzn2.x86_64
    kernel-devel-5.10.157-139.675.amzn2.x86_64
    kernel-debuginfo-5.10.157-139.675.amzn2.x86_64
    kernel-livepatch-5.10.157-139.675-1.0-0.amzn2.x86_64

Additional References

Red Hat: CVE-2022-3169, CVE-2022-4139, CVE-2022-47946

Mitre: CVE-2022-3169, CVE-2022-4139, CVE-2022-47946