Skip to content
OpenAdvisories
High ALAS2-2021-1696 16 CVEs

Important: kernel security update (Amazon Linux 2)

Published Aug 4, 2021 · Updated Oct 2, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-28772: An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. CVE-2021-47353: In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udf_symlink function CVE-2021-47345: In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdma_resolve_route() memory leak CVE-2021-47343: In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign new_root only when removal succeeds CVE-2021-47340: In the Linux kernel, the following vulnerability has been resolved: jfs: fix GPF in diFree CVE-2021-47337: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix bad pointer dereference when ehandler kthread is invalid CVE-2021-47320: In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() CVE-2021-47319: In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure CVE-2021-47311: In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove CVE-2021-47309: In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() CVE-2021-47308: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception CVE-2021-47305: In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure CVE-2021-47301: In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset CVE-2021-3655: A vulnerability was found in the Linux kernel. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory. CVE-2021-35477: A flaw in the Linux kernel allows a privileged BPF program to obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel in the eBPF subsystem CVE-2021-34556: A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack. This issue occurs when the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack. The highest threat from this vulnerability is to confidentiality.

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.241-184.433 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.241-184.433.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.241-184.433.amzn2
Amazon Linux · 2 perf 0:4.14.241-184.433.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.241-184.433.amzn2
Amazon Linux · 2 python-perf 0:4.14.241-184.433.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.241-184.433.amzn2

Vulnerabilities 16

  • High 8.8
    CVE-2021-47308

    scsi: libfc: Fix array index out of bound exception

    In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fc_rport_prli_resp().

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-47309

    net: validate lwtstate->data before returning from skb_tunnel_info()

    In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() skb_tunnel_info() returns pointer of lwtstate->data as ip_tunnel_info type without validation. lwtstate->data can have var…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-47343

    dm btree remove: assign new_root only when removal succeeds

    In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign new_root only when removal succeeds remove_raw() in dm_btree_remove() may fail due to IO read error (e.g. read the content of origin block fails during shadowing), and…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.7
    CVE-2023-28772 Public exploit

    An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2021-34556

    In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-35477

    In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-3655

    A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-47301

    igb: Fix use-after-free error during reset

    In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (next_to_watch) when cleaning the TX ring. Failure to do so can cause invalid memory accesses. If igb_poll() run…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47305

    dma-buf/sync_file: Don't leak fences on merge failure

    In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47311

    net: qcom/emac: fix UAF in emac_remove

    In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netd…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47319

    virtio-blk: Fix memory leak among suspend/resume procedure

    In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk->vqs should be freed before we call init_vqs() in virtblk_restore().

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47320

    nfs: fix acl memory leak of posix_acl_create()

    In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() When looking into another nfs xfstests report, I found acl and default_acl in nfs3_proc_create() and nfs3_proc_mknod() error paths are possibly …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47337

    scsi: core: Fix bad pointer dereference when ehandler kthread is invalid

    In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix bad pointer dereference when ehandler kthread is invalid Commit 66a834d09293 ("scsi: core: Fix error handling of scsi_host_alloc()") changed the allocation logic to call put_d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47340

    jfs: fix GPF in diFree

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix GPF in diFree Avoid passing inode with JFS_SBI(inode->i_sb)->ipimap == NULL to diFree()[1]. GFP will appear: struct inode *ipimap = JFS_SBI(ip->i_sb)->ipimap; struct inomap *imap = J…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47345

    RDMA/cma: Fix rdma_resolve_route() memory leak

    In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdma_resolve_route() memory leak Fix a memory leak when "mda_resolve_route() is called more than once on the same "rdma_cm_id". This is possible if cma_query_handler() triggers …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47353

    udf: Fix NULL pointer dereference in udf_symlink function

    In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udf_symlink function In function udf_symlink, epos.bh is assigned with the value returned by udf_tgetblk. The function udf_tgetblk is defined in udf/misc.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-34556.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-35477.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3655.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47301.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47305.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47308.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47309.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47311.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47319.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47320.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47337.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47340.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47343.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47345.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-47353.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-28772.html