ALAS2LIVEPATCH-2022-094

Related Vulnerabilities: CVE-2022-2588  

A use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. (CVE-2022-2588)

ALAS2LIVEPATCH-2022-094


Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2022-094
Advisory Release Date: 2022-12-01 18:21 Pacific
Advisory Updated Date: 2022-12-08 20:06 Pacific
Severity: Important
References: CVE-2022-2588 

Issue Overview:

A use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. (CVE-2022-2588)


Affected Packages:

kernel-livepatch-4.14.290-217.505


Issue Correction:
Please ensure you have live patching enabled.
Run yum update kernel-livepatch-4.14.290-217.505 to update your system.

New Packages:
src:
    kernel-livepatch-4.14.290-217.505-1.0-2.amzn2.src

x86_64:
    kernel-livepatch-4.14.290-217.505-1.0-2.amzn2.x86_64
    kernel-livepatch-4.14.290-217.505-debuginfo-1.0-2.amzn2.x86_64