Amazon Linux 2 Security Advisory: ALASKERNEL-5.10-2024-048
Advisory Release Date: 2024-02-01 20:10 Pacific
Advisory Updated Date: 2024-02-01 20:10 Pacific
FAQs regarding Amazon Linux ALAS/CVE Severity
A flaw has been found in Xen. An unprivileged guest can cause Denial of Service (DoS) of the host by sending network packets to the backend, causing the backend to crash. (CVE-2023-46838)
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access. (CVE-2023-6040)
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. (CVE-2023-6915)
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. (CVE-2024-0565)
netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (CVE-2024-0607)
An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2024-0646)
In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access. (CVE-2024-23849)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel to update your system.
aarch64:
kernel-5.10.209-198.812.amzn2.aarch64
kernel-headers-5.10.209-198.812.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.10.209-198.812.amzn2.aarch64
perf-5.10.209-198.812.amzn2.aarch64
perf-debuginfo-5.10.209-198.812.amzn2.aarch64
python-perf-5.10.209-198.812.amzn2.aarch64
python-perf-debuginfo-5.10.209-198.812.amzn2.aarch64
kernel-tools-5.10.209-198.812.amzn2.aarch64
kernel-tools-devel-5.10.209-198.812.amzn2.aarch64
kernel-tools-debuginfo-5.10.209-198.812.amzn2.aarch64
bpftool-5.10.209-198.812.amzn2.aarch64
bpftool-debuginfo-5.10.209-198.812.amzn2.aarch64
kernel-devel-5.10.209-198.812.amzn2.aarch64
kernel-debuginfo-5.10.209-198.812.amzn2.aarch64
kernel-livepatch-5.10.209-198.812-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.10.209-198.812.amzn2.i686
src:
kernel-5.10.209-198.812.amzn2.src
x86_64:
kernel-5.10.209-198.812.amzn2.x86_64
kernel-headers-5.10.209-198.812.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.10.209-198.812.amzn2.x86_64
perf-5.10.209-198.812.amzn2.x86_64
perf-debuginfo-5.10.209-198.812.amzn2.x86_64
python-perf-5.10.209-198.812.amzn2.x86_64
python-perf-debuginfo-5.10.209-198.812.amzn2.x86_64
kernel-tools-5.10.209-198.812.amzn2.x86_64
kernel-tools-devel-5.10.209-198.812.amzn2.x86_64
kernel-tools-debuginfo-5.10.209-198.812.amzn2.x86_64
bpftool-5.10.209-198.812.amzn2.x86_64
bpftool-debuginfo-5.10.209-198.812.amzn2.x86_64
kernel-devel-5.10.209-198.812.amzn2.x86_64
kernel-debuginfo-5.10.209-198.812.amzn2.x86_64
kernel-livepatch-5.10.209-198.812-1.0-0.amzn2.x86_64