Amazon Linux 2 Security Advisory: ALASKERNEL-5.10-2023-034
Advisory Release Date: 2023-06-21 19:12 Pacific
Advisory Updated Date: 2024-07-03 22:01 Pacific
FAQs regarding Amazon Linux ALAS/CVE Severity
2024-07-03: CVE-2023-0160 was added to this advisory.
2024-02-01: CVE-2023-3141 was added to this advisory.
2024-02-01: CVE-2024-0775 was added to this advisory.
2023-10-12: CVE-2023-3111 was added to this advisory.
2023-10-12: CVE-2023-3212 was added to this advisory.
2023-09-27: CVE-2023-3567 was added to this advisory.
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition. (CVE-2022-4269)
There is a potential deadlock in the eBPF subsystem in the Linux kernel.
The default sysctl configuration "kernel.unprivileged_bpf_disabled" on Amazon Linux does not allow unprivileged users to use eBPF. (CVE-2023-0160)
A flaw was found in the Linux kernel's networking subsystem within the RPL protocol's handling. This issue results from the improper handling of user-supplied data, which can lead to an assertion failure. This flaw allows an unauthenticated, remote attacker to create a denial of service condition on the system. (CVE-2023-2156)
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e. (CVE-2023-3090)
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag(). (CVE-2023-3111)
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak. (CVE-2023-3141)
A flaw in the Linux Kernel found in the GFS2 file system. On corrupted gfs2 file systems the evict code can try to reference the journal descriptor structure, jdesc, after it has been freed and set to NULL. It can lead to null pointer dereference when gfs2_trans_begin being called and then fail ingfs2_evict_inode(). (CVE-2023-3212)
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information. (CVE-2023-3268)
An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. (CVE-2023-34256)
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. In this flaw an attacker with local user access may lead to a system crash or a leak of internal kernel information. (CVE-2023-3567)
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation. (CVE-2023-35788)
A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free. (CVE-2024-0775)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel to update your system.
aarch64:
kernel-5.10.184-174.730.amzn2.aarch64
kernel-headers-5.10.184-174.730.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.10.184-174.730.amzn2.aarch64
perf-5.10.184-174.730.amzn2.aarch64
perf-debuginfo-5.10.184-174.730.amzn2.aarch64
python-perf-5.10.184-174.730.amzn2.aarch64
python-perf-debuginfo-5.10.184-174.730.amzn2.aarch64
kernel-tools-5.10.184-174.730.amzn2.aarch64
kernel-tools-devel-5.10.184-174.730.amzn2.aarch64
kernel-tools-debuginfo-5.10.184-174.730.amzn2.aarch64
bpftool-5.10.184-174.730.amzn2.aarch64
bpftool-debuginfo-5.10.184-174.730.amzn2.aarch64
kernel-devel-5.10.184-174.730.amzn2.aarch64
kernel-debuginfo-5.10.184-174.730.amzn2.aarch64
kernel-livepatch-5.10.184-174.730-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.10.184-174.730.amzn2.i686
src:
kernel-5.10.184-174.730.amzn2.src
x86_64:
kernel-5.10.184-174.730.amzn2.x86_64
kernel-headers-5.10.184-174.730.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.10.184-174.730.amzn2.x86_64
perf-5.10.184-174.730.amzn2.x86_64
perf-debuginfo-5.10.184-174.730.amzn2.x86_64
python-perf-5.10.184-174.730.amzn2.x86_64
python-perf-debuginfo-5.10.184-174.730.amzn2.x86_64
kernel-tools-5.10.184-174.730.amzn2.x86_64
kernel-tools-devel-5.10.184-174.730.amzn2.x86_64
kernel-tools-debuginfo-5.10.184-174.730.amzn2.x86_64
bpftool-5.10.184-174.730.amzn2.x86_64
bpftool-debuginfo-5.10.184-174.730.amzn2.x86_64
kernel-devel-5.10.184-174.730.amzn2.x86_64
kernel-debuginfo-5.10.184-174.730.amzn2.x86_64
kernel-livepatch-5.10.184-174.730-1.0-0.amzn2.x86_64