Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-19767: The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.158-129.185.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.158-129.185.amzn2 |
Vulnerabilities 1
-
Unscored —
The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_ex…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-19767.html