Skip to content
OpenAdvisories
Medium ALAS2-2023-2328 9 CVEs

Moderate: kernel security update (Amazon Linux 2)

Published Oct 30, 2023 · Updated Dec 19, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53747: In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF CVE-2023-52577: In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again CVE-2023-52574: In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed CVE-2023-52567: In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use CVE-2023-52566: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() CVE-2023-52528: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg CVE-2023-52527: In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() CVE-2023-42754: A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system. CVE-2023-34324: A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests.

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.327-246.539 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.327-246.539.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.327-246.539.amzn2
Amazon Linux · 2 perf 0:4.14.327-246.539.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.327-246.539.amzn2
Amazon Linux · 2 python-perf 0:4.14.327-246.539.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.327-246.539.amzn2

Vulnerabilities 9

  • High 7.8
    CVE-2023-52574

    team: fix null-ptr-deref when team device type is changed

    In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as follows with reproducer [1]. BUG: kernel NULL pointer dereference, address: 0000000000000228 ... RIP: 001…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53747

    vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF

    In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF After a call to console_unlock() in vcs_write() the vc_data struct can be freed by vc_port_destruct(). Because of …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2023-42754

    Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()

    A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allo…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2023-52566

    nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nilfs_dat…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.9
    CVE-2023-34324

    Possible deadlock in Linux kernel event handling

    Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an eve…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52527

    ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()

    In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Including the transhdrlen in length is a problem when the packet is partially filled (e.g. something like send(MSG_MORE) happ…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52528

    net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

    In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: u…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52567

    serial: 8250_port: Check IRQ data before use

    In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use In case the leaf driver wants to use IRQ polling (irq = 0) and IIR register shows that an interrupt happened in the 8250 hardware the IRQ data can…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52577

    dccp: fix dccp_v4_err()/dccp_v6_err() again

    In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again dh->dccph_x is the 9th byte (offset 8) in "struct dccp_hdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are big en…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-34324.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-42754.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52527.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52528.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52566.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52567.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52574.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52577.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53747.html