Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-1086: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.336-256.559 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.336-256.559.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.336-256.559.amzn2 |
Vulnerabilities 1
-
High 7.8
Use-after-free in Linux kernel's netfilter: nf_tables component
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…
KEV May 30, 2024
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-1086.html