Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-6606: An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.336-253.554 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.336-253.554.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.336-253.554.amzn2 |
Vulnerabilities 1
-
High 7.1
Kernel: out-of-bounds read vulnerability in smbcalcsize
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-6606.html