Skip to content
OpenAdvisories
High ALAS2-2022-1852 27 CVEs

Important: kernel security update (Amazon Linux 2)

Published Sep 30, 2022 · Updated Aug 26, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2860: The upstream advisory describes this issue as follows: "This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of seg6 attributes. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilties to escalate privileges and execute arbitrary code in the context of the kernel." CVE-2022-50008: In the Linux kernel, the following vulnerability has been resolved: kprobes: don't call disarm_kprobe() for disabled kprobes CVE-2022-50007: In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in __xfrm_policy_check() CVE-2022-49993: In the Linux kernel, the following vulnerability has been resolved: loop: Check for overflow while configuring loop CVE-2022-49987: In the Linux kernel, the following vulnerability has been resolved: md: call __md_stop_writes in md_stop CVE-2022-49981: In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix memory leak in hidraw_release() CVE-2022-49977: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead CVE-2022-49948: In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font CVE-2022-49936: In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls CVE-2022-48704: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon CVE-2022-48695: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning CVE-2022-48687: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through four attributes: SEG6_ATTR_HMACKEYID, SEG6_ATTR_SECRET, SEG6_ATTR_SECRETLEN and SEG6_ATTR_ALGID. CVE-2022-42703: mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. CVE-2022-40307: A race condition in the Linux kernel's EFI capsule loader driver was found in the way it handled write and flush operations on the device node of the EFI capsule. A local user could potentially use this flaw to crash the system. CVE-2022-39188: An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs. CVE-2022-36946: A memory corruption flaw was found in the Linux kernel's Netfilter subsystem in the way a local user uses the libnetfilter_queue when analyzing a corrupted network packet. This flaw allows a local user to crash the system or a remote user to crash the system when the libnetfilter_queue is used by a local user. CVE-2022-36879: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. CVE-2022-36123: A memory access flaw was found in the Linux kernel's XEN hypervisor for the virtual machine. This flaw allows a local user to crash the system or potentially escalate their privileges on the system. CVE-2022-3586: A flaw was found in the Linux kernel's networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service. CVE-2022-3028: A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket. CVE-2022-2663: An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. CVE-2022-2588: A use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. CVE-2022-2153: A flaw was found in the Linux kernel's KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. CVE-2022-1679: A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-1462: An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the fl

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.294-220.533 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.294-220.533.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.294-220.533.amzn2
Amazon Linux · 2 perf 0:4.14.294-220.533.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.294-220.533.amzn2
Amazon Linux · 2 python-perf 0:4.14.294-220.533.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.294-220.533.amzn2

Vulnerabilities 27

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-33655.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4159.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-1462.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-1679.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-2153.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-2588.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-2663.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3028.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3586.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-36123.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-36879.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-36946.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-39188.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-40307.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-42703.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-48687.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-48695.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-48704.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49936.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49948.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49977.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49981.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49987.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49993.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50007.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50008.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2860.html