Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53998: In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data CVE-2023-1077: kernel: Type confusion in pick_next_rt_entity(), which can result in memory corruption.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.344-262.563 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.344-262.563.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.344-262.563.amzn2 |
Vulnerabilities 2
-
Unscored —
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as t…
-
Unscored —
hwrng: virtio - Fix race on data_avail and actual data
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of …