Skip to content
OpenAdvisories
High ALAS2-2024-2613 20 CVEs

Important: kernel security update (Amazon Linux 2)

Published Aug 1, 2024 · Updated May 19, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39489: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo CVE-2024-39488: In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY CVE-2024-39480: In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete CVE-2024-39476: In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING CVE-2024-39276: In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() CVE-2024-38612: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path CVE-2024-38601: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks CVE-2024-38596: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg CVE-2024-38583: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread CVE-2024-38582: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfs_detach_log_writer() CVE-2024-38578: In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet CVE-2024-38558: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 CVE-2024-37356: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). CVE-2024-37353: In the Linux kernel, the following vulnerability has been resolved: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails CVE-2024-36286: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() CVE-2024-36016: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() CVE-2024-33621: In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound CVE-2023-52924: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk CVE-2023-52803: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries CVE-2023-52796: In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlan_route_v6_outbound() helper

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.349-266.564 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.349-266.564.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.349-266.564.amzn2
Amazon Linux · 2 perf 0:4.14.349-266.564.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.349-266.564.amzn2
Amazon Linux · 2 python-perf 0:4.14.349-266.564.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.349-266.564.amzn2

Vulnerabilities 20

  • Critical 10.0
    CVE-2024-38558

    net: openvswitch: fix overwriting ct original tuple for ICMPv6

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PAC…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.4
    CVE-2024-39480

    kdb: Fix buffer overflow during tab-complete

    In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-36016

    tty: n_gsm: fix possible out-of-bounds in gsm0_receive()

    In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the header of a basic option mode frame with…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-36286

    netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that nf_reinject() could be called without rcu_read_lock() : WARNING: suspicious RCU usage 6.9.0-…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38578

    ecryptfs: Fix buffer size for tag 66 packet

    In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buf…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38583

    nilfs2: fix use-after-free of timer for log writer thread

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2024-38612

    ipv6: sr: fix invalid unregister error path

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregiste…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-39276

    ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.3
    CVE-2024-38582

    nilfs2: fix potential hang in nilfs_detach_log_writer()

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfs_detach_log_writer() Syzbot has reported a potential hang in nilfs_detach_log_writer() called during nilfs2 unmount. Analysis revealed that this is because …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52796

    ipvlan: add ipvlan_route_v6_outbound() helper

    In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlan_route_v6_outbound() helper Inspired by syzbot reports using a stack of multiple ipvlan devices. Reduce stack size needed in ipvlan_process_v6_outbound() by moving the flowi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52803

    SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpc_remove_pipedir() workqueue,which takes care about pipefs superblock locking.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52924

    netfilter: nf_tables: don't skip expired elements during walk

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditions are met: 1. set is a verdict map ("1…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-33621

    ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound

    In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Raw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will hit WARN_ON_ONCE() in sk_mc_loop() through sch_direct_xm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-37353 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-37356

    tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a module parameter dctcp_shift_g as follows: alpha -= min_not_zero(alpha, alpha >> dctcp_shift_g); ... de…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-38596

    af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg

    In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writ…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-38601

    ring-buffer: Fix a race between readers and resize checks

    In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reader_page() swaps a new reader page into the ring buffer by doing cmpxchg on old->list.prev->next to poin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-39476

    md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

    In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small possibility, the root cause is e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39488

    arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY

    In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY When CONFIG_DEBUG_BUGVERBOSE=n, we fail to add necessary padding bytes to bug_table entries, and as a result the last entry in a bug tab…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-39489

    ipv6: sr: fix memleak in seg6_hmac_init_algo

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52796.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52803.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52924.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-33621.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-36016.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-36286.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-37353.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-37356.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38558.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38578.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38582.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38583.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38596.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38601.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-38612.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-39276.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-39476.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-39480.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-39488.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-39489.html