Skip to content
OpenAdvisories
Medium ALAS2-2023-1969 1 CVE

Moderate: libbpf security update (Amazon Linux 2)

Published Mar 2, 2023 · Updated Mar 7, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-3606: A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to apply a patch to fix this issue. The identifier VDB-211749 was assigned to this vulnerability.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 libbpf 0:0.5.0-2.amzn2.0.4
Amazon Linux · 2 libbpf-debuginfo 0:0.5.0-2.amzn2.0.4
Amazon Linux · 2 libbpf-devel 0:0.5.0-2.amzn2.0.4
Amazon Linux · 2 libbpf-static 0:0.5.0-2.amzn2.0.4

Vulnerabilities 1

  • Low 3.5
    CVE-2022-3606

    Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference

    A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to…

    Linux kernel kernel libbpf Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3606.html