Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9213: A flaw was found in mmap in the Linux kernel allowing the process to map a null page. This allows attackers to abuse this mechanism to turn null pointer dereferences into workable exploits. 1686136: CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms CVE-2019-8980: A kernel memory leak was found in the kernel_read_file() function in the fs/exec.c file in the Linux kernel. An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS). 1679972: CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.106-97.85.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.106-97.85.amzn2 |
Vulnerabilities 2
-
Unscored —
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cau…
-
Unscored —CVE-2019-9213 Public exploit
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which mak…