Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ALASKERNEL-5.15-2024-036

Related Vulnerabilities: CVE-2023-46838   CVE-2023-6040   CVE-2023-6915   CVE-2024-0565   CVE-2024-0646  

A flaw has been found in Xen. An unprivileged guest can cause Denial of Service (DoS) of the host by sending network packets to the backend, causing the backend to crash. (CVE-2023-46838) An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access. (CVE-2023-6040) A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. (CVE-2023-6915) An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. (CVE-2024-0565) An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2024-0646)

Source

ALASKERNEL-5.15-2024-036

Amazon Linux 2 Security Advisory: ALASKERNEL-5.15-2024-036
Advisory Release Date: 2024-02-01 20:10 Pacific
Advisory Updated Date: 2024-02-01 20:10 Pacific
Severity: Important
Issue Overview:

A flaw has been found in Xen. An unprivileged guest can cause Denial of Service (DoS) of the host by sending network packets to the backend, causing the backend to crash. (CVE-2023-46838)

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access. (CVE-2023-6040)

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. (CVE-2023-6915)

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. (CVE-2024-0565)

An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2024-0646)


Affected Packages:

kernel


Note:

This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update kernel to update your system.

New Packages:
aarch64:
    kernel-5.15.148-97.158.amzn2.aarch64
    kernel-headers-5.15.148-97.158.amzn2.aarch64
    kernel-debuginfo-common-aarch64-5.15.148-97.158.amzn2.aarch64
    perf-5.15.148-97.158.amzn2.aarch64
    perf-debuginfo-5.15.148-97.158.amzn2.aarch64
    python-perf-5.15.148-97.158.amzn2.aarch64
    python-perf-debuginfo-5.15.148-97.158.amzn2.aarch64
    kernel-tools-5.15.148-97.158.amzn2.aarch64
    kernel-tools-devel-5.15.148-97.158.amzn2.aarch64
    kernel-tools-debuginfo-5.15.148-97.158.amzn2.aarch64
    bpftool-5.15.148-97.158.amzn2.aarch64
    bpftool-debuginfo-5.15.148-97.158.amzn2.aarch64
    kernel-devel-5.15.148-97.158.amzn2.aarch64
    kernel-debuginfo-5.15.148-97.158.amzn2.aarch64
    kernel-livepatch-5.15.148-97.158-1.0-0.amzn2.aarch64

i686:
    kernel-headers-5.15.148-97.158.amzn2.i686

src:
    kernel-5.15.148-97.158.amzn2.src

x86_64:
    kernel-5.15.148-97.158.amzn2.x86_64
    kernel-headers-5.15.148-97.158.amzn2.x86_64
    kernel-debuginfo-common-x86_64-5.15.148-97.158.amzn2.x86_64
    perf-5.15.148-97.158.amzn2.x86_64
    perf-debuginfo-5.15.148-97.158.amzn2.x86_64
    python-perf-5.15.148-97.158.amzn2.x86_64
    python-perf-debuginfo-5.15.148-97.158.amzn2.x86_64
    kernel-tools-5.15.148-97.158.amzn2.x86_64
    kernel-tools-devel-5.15.148-97.158.amzn2.x86_64
    kernel-tools-debuginfo-5.15.148-97.158.amzn2.x86_64
    bpftool-5.15.148-97.158.amzn2.x86_64
    bpftool-debuginfo-5.15.148-97.158.amzn2.x86_64
    kernel-devel-5.15.148-97.158.amzn2.x86_64
    kernel-debuginfo-5.15.148-97.158.amzn2.x86_64
    kernel-livepatch-5.15.148-97.158-1.0-0.amzn2.x86_64

Additional References

Red Hat: CVE-2023-46838, CVE-2023-6040, CVE-2023-6915, CVE-2024-0565, CVE-2024-0646

Mitre: CVE-2023-46838, CVE-2023-6040, CVE-2023-6915, CVE-2024-0565, CVE-2024-0646

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started