Amazon Linux 2 Security Advisory: ALASKERNEL-5.10-2023-029
Advisory Release Date: 2023-04-13 19:51 Pacific
Advisory Updated Date: 2023-04-17 22:54 Pacific
RESERVED
NOTE: https://www.openwall.com/lists/oss-security/2022/12/14/3
NOTE: https://lore.kernel.org/all/1670885411-10060-1-git-send-email-dai.ngo@oracle.com/ (CVE-2022-4379)
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). (CVE-2023-28466)
Affected Packages:
kernel
Issue Correction:
Run yum update kernel to update your system.
aarch64:
kernel-5.10.177-158.645.amzn2.aarch64
kernel-headers-5.10.177-158.645.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.10.177-158.645.amzn2.aarch64
perf-5.10.177-158.645.amzn2.aarch64
perf-debuginfo-5.10.177-158.645.amzn2.aarch64
python-perf-5.10.177-158.645.amzn2.aarch64
python-perf-debuginfo-5.10.177-158.645.amzn2.aarch64
kernel-tools-5.10.177-158.645.amzn2.aarch64
kernel-tools-devel-5.10.177-158.645.amzn2.aarch64
kernel-tools-debuginfo-5.10.177-158.645.amzn2.aarch64
bpftool-5.10.177-158.645.amzn2.aarch64
bpftool-debuginfo-5.10.177-158.645.amzn2.aarch64
kernel-devel-5.10.177-158.645.amzn2.aarch64
kernel-debuginfo-5.10.177-158.645.amzn2.aarch64
kernel-livepatch-5.10.177-158.645-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.10.177-158.645.amzn2.i686
src:
kernel-5.10.177-158.645.amzn2.src
x86_64:
kernel-5.10.177-158.645.amzn2.x86_64
kernel-headers-5.10.177-158.645.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.10.177-158.645.amzn2.x86_64
perf-5.10.177-158.645.amzn2.x86_64
perf-debuginfo-5.10.177-158.645.amzn2.x86_64
python-perf-5.10.177-158.645.amzn2.x86_64
python-perf-debuginfo-5.10.177-158.645.amzn2.x86_64
kernel-tools-5.10.177-158.645.amzn2.x86_64
kernel-tools-devel-5.10.177-158.645.amzn2.x86_64
kernel-tools-debuginfo-5.10.177-158.645.amzn2.x86_64
bpftool-5.10.177-158.645.amzn2.x86_64
bpftool-debuginfo-5.10.177-158.645.amzn2.x86_64
kernel-devel-5.10.177-158.645.amzn2.x86_64
kernel-debuginfo-5.10.177-158.645.amzn2.x86_64
kernel-livepatch-5.10.177-158.645-1.0-0.amzn2.x86_64