Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-49293: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() CVE-2022-48931: In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subsystem() CVE-2022-48930: In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock CVE-2022-48919: In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() CVE-2022-48912: In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in __nf_register_net_hook() CVE-2022-48911: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free CVE-2022-48855: In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets CVE-2022-48850: In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speed_show CVE-2022-48839: In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() CVE-2022-20368: Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel CVE-2022-1016: A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle return with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker. CVE-2022-1015: A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.273-207.502 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.273-207.502.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.273-207.502.amzn2 |
Vulnerabilities 12
-
High 8.8
cifs: fix double free race when mount fails in cifs_get_root()
In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails during cifs_smb3_do_mount() we call deactivate_locked_super() which eventually will call delayed_free…
-
High 7.8
net/packet: fix slab-out-of-bounds access in packet_recvmsg()
In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() syzbot found that when an AF_PACKET socket is using PACKET_COPY_THRESH and mmap operations, tpacket_rcv() is queueing skbs with g…
-
High 7.8
netfilter: nf_queue: fix possible use-after-free
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot qu…
-
High 7.8
netfilter: fix use-after-free in __nf_register_net_hook()
In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in __nf_register_net_hook() We must not dereference @new_hooks after nf_hook_mutex has been released, because other threads might have freed our allocated hooks …
-
Unscored —CVE-2022-1015 Public exploit
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allow…
-
Unscored —
A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. …
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel
-
Unscored —
net-sysfs: add check for netdevice being present to speed_show
In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speed_show When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device …
-
Unscored —
sctp: fix kernel-infoleak for SCTP sockets
In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak [1] of 4 bytes. After analysis, it turned out r->idiag_expires is not initialized if inet_sctp_diag_fill() calls i…
-
Unscored —
RDMA/ib_srp: Fix a deadlock
In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushing system_long_wq is deadlock-prone and since that call is redundant with a preceding cancel_work_sync()
-
Unscored —
configfs: fix a race in configfs_{,un}register_subsystem()
In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subsystem() When configfs_register_subsystem() or configfs_unregister_subsystem() is executing link_group() or unlink_group(), it is possible th…
-
Unscored —
netfilter: nf_tables: initialize registers in nft_do_chain()
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() Initialize registers to avoid stack leak into userspace.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1015.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1016.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-20368.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48839.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48850.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48855.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48911.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48912.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48919.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48930.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48931.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49293.html