Vulmon
Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2023-098
Advisory Release Date: 2023-01-18 00:25 Pacific
Advisory Updated Date: 2023-01-23 21:25 Pacific
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. (CVE-2022-3524)
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363. (CVE-2022-3594)
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/inode.c of the component nilfs2. The manipulation leads to null pointer dereference. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211920. (CVE-2022-3621)
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211921 was assigned to this vulnerability. (CVE-2022-3623)
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992. (CVE-2022-3649)
Affected Packages:
kernel-livepatch-5.10.144-127.601
Issue Correction:
Please ensure you have live patching enabled.
Run yum update kernel-livepatch-5.10.144-127.601 to update your system.
aarch64:
kernel-livepatch-5.10.144-127.601-1.0-3.amzn2.aarch64
kernel-livepatch-5.10.144-127.601-debuginfo-1.0-3.amzn2.aarch64
src:
kernel-livepatch-5.10.144-127.601-1.0-3.amzn2.src
x86_64:
kernel-livepatch-5.10.144-127.601-1.0-3.amzn2.x86_64
kernel-livepatch-5.10.144-127.601-debuginfo-1.0-3.amzn2.x86_64