Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-6931: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b. CVE-2023-6546: A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system. CVE-2023-6040: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.336-255.557 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.336-255.557.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.336-255.557.amzn2 |
Vulnerabilities 3
-
High 7.8
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) valu…
-
High 7.8CVE-2023-6931 Public exploit
Out-of-bounds write in Linux kernel's Performance Events system component
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_…
-
High 7.0CVE-2023-6546 Public exploit
Kernel: gsm multiplexing race condition leads to privilege escalation
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem …