Amazon Linux 2022 Security Advisory: ALAS-2022-024
Advisory Release Date: 2022-02-04 19:30 Pacific
Advisory Updated Date: 2022-02-08 01:36 Pacific
Severity:
Important
Issue Overview:
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system. (CVE-2022-0185)
The cgroup release_agent is called with call_usermodehelper. The function call_usermodehelper starts the release_agent with a full set of capabilities. Therefore require capabilities when setting the release_agent. (CVE-2022-0492)
Affected Packages:
kernel
Issue Correction:
Run dnf update --releasever=2022.0.20220204 kernel to update your system.
New Packages:
aarch64:
bpftool-5.10.96-90.460.amzn2022.aarch64
kernel-tools-devel-5.10.96-90.460.amzn2022.aarch64
kernel-livepatch-5.10.96-90.460-1.0-0.amzn2022.aarch64
perf-5.10.96-90.460.amzn2022.aarch64
kernel-tools-debuginfo-5.10.96-90.460.amzn2022.aarch64
python3-perf-5.10.96-90.460.amzn2022.aarch64
perf-debuginfo-5.10.96-90.460.amzn2022.aarch64
kernel-headers-5.10.96-90.460.amzn2022.aarch64
bpftool-debuginfo-5.10.96-90.460.amzn2022.aarch64
python3-perf-debuginfo-5.10.96-90.460.amzn2022.aarch64
kernel-tools-5.10.96-90.460.amzn2022.aarch64
kernel-debuginfo-5.10.96-90.460.amzn2022.aarch64
kernel-5.10.96-90.460.amzn2022.aarch64
kernel-debuginfo-common-aarch64-5.10.96-90.460.amzn2022.aarch64
kernel-devel-5.10.96-90.460.amzn2022.aarch64
src:
kernel-5.10.96-90.460.amzn2022.src
x86_64:
perf-debuginfo-5.10.96-90.460.amzn2022.x86_64
kernel-tools-5.10.96-90.460.amzn2022.x86_64
python3-perf-debuginfo-5.10.96-90.460.amzn2022.x86_64
kernel-tools-devel-5.10.96-90.460.amzn2022.x86_64
perf-5.10.96-90.460.amzn2022.x86_64
python3-perf-5.10.96-90.460.amzn2022.x86_64
kernel-tools-debuginfo-5.10.96-90.460.amzn2022.x86_64
bpftool-5.10.96-90.460.amzn2022.x86_64
kernel-livepatch-5.10.96-90.460-1.0-0.amzn2022.x86_64
bpftool-debuginfo-5.10.96-90.460.amzn2022.x86_64
kernel-headers-5.10.96-90.460.amzn2022.x86_64
kernel-debuginfo-5.10.96-90.460.amzn2022.x86_64
kernel-5.10.96-90.460.amzn2022.x86_64
kernel-debuginfo-common-x86_64-5.10.96-90.460.amzn2022.x86_64
kernel-devel-5.10.96-90.460.amzn2022.x86_64