Vulmon
Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2023-133
Advisory Release Date: 2023-06-21 19:12 Pacific
Advisory Updated Date: 2023-06-29 18:07 Pacific
Severity:
Important
Issue Overview:
An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2023-2124)
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). (CVE-2023-28466)
Affected Packages:
kernel-livepatch-4.14.309-231.529
Issue Correction:
Please ensure you have live patching enabled.
Run yum update kernel-livepatch-4.14.309-231.529 to update your system.
New Packages:
src:
kernel-livepatch-4.14.309-231.529-1.0-1.amzn2.src
x86_64:
kernel-livepatch-4.14.309-231.529-1.0-1.amzn2.x86_64
kernel-livepatch-4.14.309-231.529-debuginfo-1.0-1.amzn2.x86_64