ALASLIVEPATCH-2023-157

Related Vulnerabilities: CVE-2023-45871  

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU. (CVE-2023-45871)

ALASLIVEPATCH-2023-157


Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2023-157
Advisory Release Date: 2023-11-29 22:47 Pacific
Advisory Updated Date: 2023-12-04 21:55 Pacific
Severity: Important

Issue Overview:

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU. (CVE-2023-45871)


Affected Packages:

kernel-livepatch-4.14.322-246.539


Issue Correction:
Please ensure you have live patching enabled.
Run yum update kernel-livepatch-4.14.322-246.539 to update your system.

New Packages:
src:
    kernel-livepatch-4.14.322-246.539-1.0-2.amzn2.src

x86_64:
    kernel-livepatch-4.14.322-246.539-1.0-2.amzn2.x86_64
    kernel-livepatch-4.14.322-246.539-debuginfo-1.0-2.amzn2.x86_64