Amazon Linux 2023 Security Advisory: ALAS-2023-234
Advisory Release Date: 2023-06-30 01:01 Pacific
Advisory Updated Date: 2023-07-05 23:15 Pacific
Severity:
Medium
Issue Overview:
2023-07-06: The severity level was changed from important to medium.
A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement without properly acquiring the MM write lock, leading to use-after-free issues. An unprivileged local user could use this flaw to compromise the kernel and escalate their privileges.
Affected Packages:
kernel
Issue Correction:
Run dnf update kernel --releasever 2023.1.20230705 to update your system.
New Packages:
aarch64:
kernel-libbpf-6.1.34-59.116.amzn2023.aarch64
bpftool-6.1.34-59.116.amzn2023.aarch64
perf-debuginfo-6.1.34-59.116.amzn2023.aarch64
python3-perf-debuginfo-6.1.34-59.116.amzn2023.aarch64
perf-6.1.34-59.116.amzn2023.aarch64
bpftool-debuginfo-6.1.34-59.116.amzn2023.aarch64
kernel-libbpf-static-6.1.34-59.116.amzn2023.aarch64
kernel-livepatch-6.1.34-59.116-1.0-0.amzn2023.aarch64
kernel-libbpf-devel-6.1.34-59.116.amzn2023.aarch64
kernel-tools-devel-6.1.34-59.116.amzn2023.aarch64
kernel-headers-6.1.34-59.116.amzn2023.aarch64
kernel-tools-debuginfo-6.1.34-59.116.amzn2023.aarch64
kernel-tools-6.1.34-59.116.amzn2023.aarch64
python3-perf-6.1.34-59.116.amzn2023.aarch64
kernel-6.1.34-59.116.amzn2023.aarch64
kernel-debuginfo-6.1.34-59.116.amzn2023.aarch64
kernel-debuginfo-common-aarch64-6.1.34-59.116.amzn2023.aarch64
kernel-devel-6.1.34-59.116.amzn2023.aarch64
src:
kernel-6.1.34-59.116.amzn2023.src
x86_64:
kernel-libbpf-6.1.34-59.116.amzn2023.x86_64
kernel-libbpf-devel-6.1.34-59.116.amzn2023.x86_64
kernel-tools-6.1.34-59.116.amzn2023.x86_64
perf-debuginfo-6.1.34-59.116.amzn2023.x86_64
python3-perf-6.1.34-59.116.amzn2023.x86_64
kernel-headers-6.1.34-59.116.amzn2023.x86_64
kernel-tools-debuginfo-6.1.34-59.116.amzn2023.x86_64
bpftool-debuginfo-6.1.34-59.116.amzn2023.x86_64
python3-perf-debuginfo-6.1.34-59.116.amzn2023.x86_64
bpftool-6.1.34-59.116.amzn2023.x86_64
kernel-livepatch-6.1.34-59.116-1.0-0.amzn2023.x86_64
kernel-tools-devel-6.1.34-59.116.amzn2023.x86_64
kernel-libbpf-static-6.1.34-59.116.amzn2023.x86_64
perf-6.1.34-59.116.amzn2023.x86_64
kernel-debuginfo-6.1.34-59.116.amzn2023.x86_64
kernel-6.1.34-59.116.amzn2023.x86_64
kernel-debuginfo-common-x86_64-6.1.34-59.116.amzn2023.x86_64
kernel-devel-6.1.34-59.116.amzn2023.x86_64