ALASLIVEPATCH-2024-031


Amazon Linux 2023 Security Advisory: ALASLIVEPATCH-2024-031
Advisory Release Date: 2024-08-29 00:24 Pacific
Advisory Updated Date: 2024-08-29 00:24 Pacific
Severity: Important

Issue Overview:

kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)

kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)


Affected Packages:

kernel-livepatch-6.1.94-99.176


Issue Correction:
Run dnf update kernel-livepatch-6.1.94-99.176 --releasever 2023.5.20240903 to update your system.

New Packages:
aarch64:
    kernel-livepatch-6.1.94-99.176-1.0-1.amzn2023.aarch64

src:
    kernel-livepatch-6.1.94-99.176-1.0-1.amzn2023.src

x86_64:
    kernel-livepatch-6.1.94-99.176-1.0-1.amzn2023.x86_64