Skip to content
OpenAdvisories
Medium ALAS2-2023-2359 5 CVEs

Moderate: kernel security update (Amazon Linux 2)

Published Nov 29, 2023 · Updated Dec 5, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-52868: In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow CVE-2023-52867: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow CVE-2023-52845: In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING CVE-2023-52843: In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header CVE-2023-3567: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. In this flaw an attacker with local user access may lead to a system crash or a leak of internal kernel information.

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.330-250.540 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.330-250.540.amzn2
Amazon Linux · 2 perf 0:4.14.330-250.540.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.330-250.540.amzn2
Amazon Linux · 2 python-perf 0:4.14.330-250.540.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.330-250.540.amzn2

Vulnerabilities 5

  • High 7.1
    CVE-2023-3567

    Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

    A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2023-52845

    tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING

    In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzbot reported the following uninit-value access issue [1]: ===================================================== BUG: KMSA…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2023-52867

    drm/radeon: possible buffer overflow

    In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52843

    llc: verify mac len before reading mac header

    In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with eth_hdr without verifying that the skb has an Ethernet header. Syzbot was able to enter llc_rcv on a tun device. Tu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52868

    thermal: core: prevent potential string overflow

    In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-3567.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52843.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52845.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52867.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52868.html