High ALAS2-2023-2108 1 CVE

Important: kernel security update (Amazon Linux 2)

Published Jun 28, 2023 · Updated Jun 29, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-1206: An issue was found in the Linux kernel's IPv6 TCP connection tracking code, which could lead to high CPU usage with certain traffic patterns.

Fixed packages 14

Release	Package	Fixed in
Amazon Linux · 2	kernel	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-debuginfo	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-debuginfo-common-aarch64	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-debuginfo-common-x86_64	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-devel	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-headers	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-livepatch-4.14.318-241.531	0:1.0-0.amzn2
Amazon Linux · 2	kernel-tools	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-tools-debuginfo	0:4.14.318-241.531.amzn2
Amazon Linux · 2	kernel-tools-devel	0:4.14.318-241.531.amzn2
Amazon Linux · 2	perf	0:4.14.318-241.531.amzn2
Amazon Linux · 2	perf-debuginfo	0:4.14.318-241.531.amzn2
Amazon Linux · 2	python-perf	0:4.14.318-241.531.amzn2
Amazon Linux · 2	python-perf-debuginfo	0:4.14.318-241.531.amzn2

Vulnerabilities 1

Unscored —

CVE-2023-1206 Public exploit

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a use…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 30, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-1206.html