Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2023-100
Advisory Release Date: 2023-01-18 00:25 Pacific
Advisory Updated Date: 2023-01-20 23:46 Pacific
Severity:
Important
Issue Overview:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. (CVE-2022-3524)
Affected Packages:
kernel-livepatch-4.14.299-223.520
Issue Correction:
Please ensure you have live patching enabled.
Run yum update kernel-livepatch-4.14.299-223.520 to update your system.
New Packages:
src:
kernel-livepatch-4.14.299-223.520-1.0-2.amzn2.src
x86_64:
kernel-livepatch-4.14.299-223.520-1.0-2.amzn2.x86_64
kernel-livepatch-4.14.299-223.520-debuginfo-1.0-2.amzn2.x86_64