Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-36791: In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation CVE-2020-12826: A flaw was found in the Linux kernel loose validation of child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process. CVE-2020-12657: A flaw was found in the Linux kernel's implementation of the BFQ IO scheduler. This flaw allows a local user able to groom system memory to cause kernel memory corruption and possible privilege escalation by abusing a race condition in the IO scheduler.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.177-139.253 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.177-139.253.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.177-139.253.amzn2 |
Vulnerabilities 3
-
High 7.8
net_sched: keep alloc_hash updated after hash allocation
In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599be01ee567 ("net_sched: fix an OOB access in cls_tcindex") I moved cp->hash calculation before the first tcindex_alloc_per…
-
Unscored —
An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to b…
-
Unscored —
A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in…