Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-50055: In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() CVE-2024-49860: In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-275.591 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-275.591.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-275.591.amzn2 |
Vulnerabilities 2
-
High 7.8
driver core: bus: Fix double free in driver API bus_register()
In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any error which happens after kset_register() will cause that @priv are freed twice, fixed by setting @priv …
-
High 7.3
ACPI: sysfs: validate return type of _STR method
In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.