Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-47112: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well CVE-2021-47110: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Disable kvmclock on all CPUs on shutdown
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.348-265.565 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.348-265.565.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.348-265.565.amzn2 |
Vulnerabilities 2
-
High 7.8
x86/kvm: Teardown PV features on boot CPU as well
In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well Various PV features (Async PF, PV EOI, steal time) work through memory shared with hypervisor and when we restore from hibernation we must pr…
-
Unscored —
x86/kvm: Disable kvmclock on all CPUs on shutdown
In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Disable kvmclock on all CPUs on shutdown Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard ag…