Vulmon
Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2024-164
Advisory Release Date: 2024-02-01 20:10 Pacific
Advisory Updated Date: 2024-02-01 20:10 Pacific
Severity:
Important
Issue Overview:
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access. (CVE-2023-6040)
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information. (CVE-2023-6606)
Affected Packages:
kernel-livepatch-4.14.334-252.552
Issue Correction:
Run yum update kernel-livepatch-4.14.334-252.552 to update your system.
New Packages:
src:
kernel-livepatch-4.14.334-252.552-1.0-1.amzn2.src
x86_64:
kernel-livepatch-4.14.334-252.552-1.0-1.amzn2.x86_64
kernel-livepatch-4.14.334-252.552-debuginfo-1.0-1.amzn2.x86_64