Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35807: In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize CVE-2024-26687: In the Linux kernel, the following vulnerability has been resolved: xen/events: close evtchn after mapping cleanup
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.336-257.566 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.336-257.566.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.336-257.566.amzn2 |
Vulnerabilities 2
-
Unscored —
xen/events: close evtchn after mapping cleanup
In the Linux kernel, the following vulnerability has been resolved: xen/events: close evtchn after mapping cleanup shutdown_pirq and startup_pirq are not taking the irq_mapping_update_lock because they can't due to lock inversion. Both are called with the irq…
-
Unscored —
ext4: fix corruption during on-line resize
In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize We observed a corruption during on-line resize of a file system that is larger than 16 TiB with 4k block size. With having more then 2^32 blocks res…