ALAS-2024-510


Amazon Linux 2023 Security Advisory: ALAS-2024-510
Advisory Release Date: 2024-02-01 17:56 Pacific
Advisory Updated Date: 2024-02-06 15:00 Pacific
Severity: Medium

Issue Overview:

A flaw has been found in Xen. An unprivileged guest can cause Denial of Service (DoS) of the host by sending network packets to the backend, causing the backend to crash. (CVE-2023-46838)

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. (CVE-2023-6915)


Affected Packages:

kernel


Issue Correction:
Run dnf update kernel --releasever 2023.3.20240205 to update your system.

New Packages:
aarch64:
    bpftool-debuginfo-6.1.75-99.163.amzn2023.aarch64
    kernel-livepatch-6.1.75-99.163-1.0-0.amzn2023.aarch64
    kernel-libbpf-devel-6.1.75-99.163.amzn2023.aarch64
    python3-perf-debuginfo-6.1.75-99.163.amzn2023.aarch64
    kernel-tools-devel-6.1.75-99.163.amzn2023.aarch64
    perf-debuginfo-6.1.75-99.163.amzn2023.aarch64
    python3-perf-6.1.75-99.163.amzn2023.aarch64
    kernel-libbpf-static-6.1.75-99.163.amzn2023.aarch64
    kernel-tools-6.1.75-99.163.amzn2023.aarch64
    bpftool-6.1.75-99.163.amzn2023.aarch64
    kernel-modules-extra-6.1.75-99.163.amzn2023.aarch64
    kernel-modules-extra-common-6.1.75-99.163.amzn2023.aarch64
    kernel-6.1.75-99.163.amzn2023.aarch64
    kernel-libbpf-6.1.75-99.163.amzn2023.aarch64
    kernel-headers-6.1.75-99.163.amzn2023.aarch64
    kernel-tools-debuginfo-6.1.75-99.163.amzn2023.aarch64
    kernel-debuginfo-6.1.75-99.163.amzn2023.aarch64
    perf-6.1.75-99.163.amzn2023.aarch64
    kernel-debuginfo-common-aarch64-6.1.75-99.163.amzn2023.aarch64
    kernel-devel-6.1.75-99.163.amzn2023.aarch64

src:
    kernel-6.1.75-99.163.amzn2023.src

x86_64:
    python3-perf-debuginfo-6.1.75-99.163.amzn2023.x86_64
    kernel-libbpf-6.1.75-99.163.amzn2023.x86_64
    python3-perf-6.1.75-99.163.amzn2023.x86_64
    kernel-modules-extra-6.1.75-99.163.amzn2023.x86_64
    bpftool-6.1.75-99.163.amzn2023.x86_64
    kernel-modules-extra-common-6.1.75-99.163.amzn2023.x86_64
    kernel-livepatch-6.1.75-99.163-1.0-0.amzn2023.x86_64
    kernel-tools-devel-6.1.75-99.163.amzn2023.x86_64
    kernel-headers-6.1.75-99.163.amzn2023.x86_64
    kernel-libbpf-static-6.1.75-99.163.amzn2023.x86_64
    bpftool-debuginfo-6.1.75-99.163.amzn2023.x86_64
    kernel-tools-debuginfo-6.1.75-99.163.amzn2023.x86_64
    perf-debuginfo-6.1.75-99.163.amzn2023.x86_64
    kernel-libbpf-devel-6.1.75-99.163.amzn2023.x86_64
    kernel-tools-6.1.75-99.163.amzn2023.x86_64
    perf-6.1.75-99.163.amzn2023.x86_64
    kernel-debuginfo-6.1.75-99.163.amzn2023.x86_64
    kernel-6.1.75-99.163.amzn2023.x86_64
    kernel-debuginfo-common-x86_64-6.1.75-99.163.amzn2023.x86_64
    kernel-devel-6.1.75-99.163.amzn2023.x86_64