Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12232: A NULL pointer dereference issue was found in the Linux kernel. If the close() and fchownat() system calls share a socket file descriptor as an argument, then the two calls can race and trigger a NULL pointer dereference leading to a system crash and a denial of service. 1590215: CVE-2018-12232 kernel: NULL pointer dereference if close and fchownat system calls share a socket file descriptor
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.51-66.38.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.51-66.38.amzn2 |
Vulnerabilities 1
-
Unscored —
In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12232.html