ALASLIVEPATCH-2025-196

References: CVE-2023-52760  CVE-2024-36899  CVE-2024-49960  CVE-2024-49996  CVE-2024-50055  CVE-2024-50083  CVE-2024-50121  CVE-2024-50143  CVE-2024-50151  CVE-2024-50230  CVE-2024-50262  CVE-2024-56642 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (CVE-2023-52760)

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix timer use-after-free on failed mount (CVE-2024-49960)

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix buffer overflow when parsing NFS reparse points (CVE-2024-49996)

In the Linux kernel, the following vulnerability has been resolved:

driver core: bus: Fix double free in driver API bus_register() (CVE-2024-50055)

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix mptcp DSS corruption due to large pmtu xmit (CVE-2024-50083)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (CVE-2024-50121)

In the Linux kernel, the following vulnerability has been resolved:

udf: fix uninit-value use in udf_get_fileshortad (CVE-2024-50143)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix OOBs when building SMB2_IOCTL request (CVE-2024-50151)

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix kernel bug due to missing clearing of checked flag (CVE-2024-50230)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (CVE-2024-56642)

Issue Correction:
Run yum update kernel-livepatch-5.10.227-219.884 to update your system.

New Packages:

aarch64:
    kernel-livepatch-5.10.227-219.884-1.0-1.amzn2.aarch64

src:
    kernel-livepatch-5.10.227-219.884-1.0-1.amzn2.src

x86_64:
    kernel-livepatch-5.10.227-219.884-1.0-1.amzn2.x86_64