Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2023-2124

An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2023-2124)

Source

ALAS2KERNEL-5.10-2023-031

Amazon Linux 2 Security Advisory: ALASKERNEL-5.10-2023-031
Advisory Release Date: 2023-04-27 17:43 Pacific
Advisory Updated Date: 2023-05-01 19:12 Pacific

Severity: Important

References: CVE-2023-2124
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2023-2124)

Affected Packages:

kernel

Issue Correction:
Run yum update kernel to update your system.

New Packages:

aarch64:
    kernel-5.10.178-162.673.amzn2.aarch64
    kernel-headers-5.10.178-162.673.amzn2.aarch64
    kernel-debuginfo-common-aarch64-5.10.178-162.673.amzn2.aarch64
    perf-5.10.178-162.673.amzn2.aarch64
    perf-debuginfo-5.10.178-162.673.amzn2.aarch64
    python-perf-5.10.178-162.673.amzn2.aarch64
    python-perf-debuginfo-5.10.178-162.673.amzn2.aarch64
    kernel-tools-5.10.178-162.673.amzn2.aarch64
    kernel-tools-devel-5.10.178-162.673.amzn2.aarch64
    kernel-tools-debuginfo-5.10.178-162.673.amzn2.aarch64
    bpftool-5.10.178-162.673.amzn2.aarch64
    bpftool-debuginfo-5.10.178-162.673.amzn2.aarch64
    kernel-devel-5.10.178-162.673.amzn2.aarch64
    kernel-debuginfo-5.10.178-162.673.amzn2.aarch64
    kernel-livepatch-5.10.178-162.673-1.0-0.amzn2.aarch64

i686:
    kernel-headers-5.10.178-162.673.amzn2.i686

src:
    kernel-5.10.178-162.673.amzn2.src

x86_64:
    kernel-5.10.178-162.673.amzn2.x86_64
    kernel-headers-5.10.178-162.673.amzn2.x86_64
    kernel-debuginfo-common-x86_64-5.10.178-162.673.amzn2.x86_64
    perf-5.10.178-162.673.amzn2.x86_64
    perf-debuginfo-5.10.178-162.673.amzn2.x86_64
    python-perf-5.10.178-162.673.amzn2.x86_64
    python-perf-debuginfo-5.10.178-162.673.amzn2.x86_64
    kernel-tools-5.10.178-162.673.amzn2.x86_64
    kernel-tools-devel-5.10.178-162.673.amzn2.x86_64
    kernel-tools-debuginfo-5.10.178-162.673.amzn2.x86_64
    bpftool-5.10.178-162.673.amzn2.x86_64
    bpftool-debuginfo-5.10.178-162.673.amzn2.x86_64
    kernel-devel-5.10.178-162.673.amzn2.x86_64
    kernel-debuginfo-5.10.178-162.673.amzn2.x86_64
    kernel-livepatch-5.10.178-162.673-1.0-0.amzn2.x86_64

Additional References

Red Hat: CVE-2023-2124

Mitre: CVE-2023-2124

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2KERNEL-5.10-2023-031

ALAS2KERNEL-5.10-2023-031

Additional References

Vulmon Search

About

Products

Connect