Skip to content
OpenAdvisories
High ALAS2-2019-1179 2 CVEs

Important: kernel security update (Amazon Linux 2)

Published Mar 21, 2019 · Updated Mar 28, 2019

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9213: A flaw was found in mmap in the Linux kernel allowing the process to map a null page. This allows attackers to abuse this mechanism to turn null pointer dereferences into workable exploits. 1686136: CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms CVE-2019-8980: A kernel memory leak was found in the kernel_read_file() function in the fs/exec.c file in the Linux kernel. An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS). 1679972: CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service

Fixed packages 13

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.106-97.85.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.106-97.85.amzn2
Amazon Linux · 2 perf 0:4.14.106-97.85.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.106-97.85.amzn2
Amazon Linux · 2 python-perf 0:4.14.106-97.85.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.106-97.85.amzn2

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-8980.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-9213.html