Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-9516: A flaw was found in the Linux kernel in the hid_debug_events_read() function in the drivers/hid/hid-debug.c file. A lack of the certain checks may result in receiving userspace buffer overflow and an out-of-bounds write or to the infinite loop. A flaw was found in the Linux kernel in the hid_debug_events_read() function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user ("root") to achieve an out-of-bounds write and thus receiving user space buffer corruption. 1631036: CVE-2018-9516 kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.55-68.37.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.55-68.37.amzn2 |
Vulnerabilities 1
-
Unscored —
In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds ch…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-9516.html