Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-56642: In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). CVE-2024-56631: In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() CVE-2024-53095: In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. CVE-2024-50279: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing CVE-2024-50143: In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad CVE-2024-50035: In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access CVE-2024-49995: In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun CVE-2024-10929: Placeholder CVE. Details forthcoming CVE-2021-47163: In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-274.598 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-274.598.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-274.598.amzn2 |
Vulnerabilities 9
-
Critical 9.8
smb: client: Fix use-after-free of network namespace.
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. [0] The workload runs on Kubernetes, and some …
-
High 7.8
tipc: wait and exit until all work queues are done
In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a crash could be triggered simply by repeating these commands several times: # modprobe tipc # tipc bearer enable media udp na…
-
High 7.8
udf: fix uninit-value use in udf_get_fileshortad
In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen in udf_current_aext to mitigate later uninit-value use in udf_get_fileshortad KMSAN bug[1]. After apply…
-
High 7.8
scsi: sg: Fix slab-use-after-free read in sg_release()
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug in sg_release(), detected by syzbot with KASAN: BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 ker…
-
High 7.8
tipc: Fix use-after-free of kernel socket in cleanup_bearer().
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1] When bearer_disable() calls t…
-
High 7.1
dm cache: fix out-of-bounds access to the dirty bitset when resizing
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitse…
-
Medium 5.1
Spectre-BSE
In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.
-
Unscored —CVE-2024-49995 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
ppp: fix ppp_async_encode() illegal access
In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode() [1] In this case, pppoe_sendmsg() is called with a zero size. Then ppp_async_encode() is called with …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47163.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-10929.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-49995.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50035.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50143.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50279.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-53095.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-56631.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-56642.html