Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5717: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer. We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06. CVE-2023-52478: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect CVE-2023-52477: In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors CVE-2023-3397: A race condition between two functions, lmLogClose() and txEnd(), in the Linux kernel's JFS filesystem can lead to a use-after-free vulnerability and crash.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.328-248.540 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.328-248.540.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.328-248.540.amzn2 |
Vulnerabilities 4
-
High 8.8
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() …
-
High 7.8CVE-2023-5717 Public exploit
Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's si…
-
High 7.0
Kernel: slab-use-after-free write in txend due to race condition
A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information.
-
Unscored —
usb: hub: Guard against accesses to uninitialized BOS descriptors
In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was…