Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-44948: In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them CVE-2024-44944: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID CVE-2024-43914: In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling CVE-2024-43893: In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero CVE-2024-43883: In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained CVE-2024-43882: In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage CVE-2024-43871: In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() CVE-2024-43861: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets CVE-2024-43856: In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent CVE-2024-42311: In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() CVE-2024-42305: In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed CVE-2024-42304: In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole CVE-2024-42295: In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfs_btnode_create_block() CVE-2024-42289: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async logout explicitly CVE-2024-42285: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs CVE-2024-42284: In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error CVE-2024-42131: In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.353-270.569 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.353-270.569.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.353-270.569.amzn2 |
Vulnerabilities 17
-
Critical 9.8
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_…
-
Critical 9.8
usb: vhci-hcd: Do not drop references before new references are gained
In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. …
-
Critical 9.1
tipc: Return non-zero value from tipc_udp_addr2str() on error
In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occ…
-
High 7.8
ext4: make sure the first directory block is not a hole
In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are r…
-
High 7.8
hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ================…
-
High 7.8
dma: fix call order in dmam_free_coherent
In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent dmam_free_coherent() frees a DMA allocation, which makes the freed vaddr available for reuse, then calls devres_destroy() to remove and free the data…
-
High 7.8
exec: Fix ToCToU between perm check and set-uid/gid usage
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permission checking is done against the file's metadata at that moment, and on succe…
-
Unscored —
mm: avoid overflows in dirty throttling logic
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications…
-
Unscored —
scsi: qla2xxx: During vport delete send async logout explicitly
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async logout explicitly During vport delete, it is observed that during unload we hit a crash because of stale entries in outstanding command array. Fo…
-
Unscored —
nilfs2: handle inconsistent state in nilfs_btnode_create_block()
In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfs_btnode_create_block() Syzbot reported that a buffer state inconsistency was detected in nilfs_btnode_create_block(), triggering a kernel bug. It is …
-
Unscored —
ext4: check dot and dotdot of dx_root before making dir indexed
In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: f…
-
Unscored —
net: usb: qmi_wwan: fix memory leak for not ip packets
In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive.
-
Unscored —
devres: Fix memory leakage caused by driver API devm_free_percpu()
In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed b…
-
Unscored —
serial: core: check uartclk for zero to avoid divide by zero
In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baud_base can result in uartclk being zero, which will result in a divide by zero error …
-
Unscored —
md/raid5: avoid BUG_ON() while continue reshape after reassembling
In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, follo…
-
Unscored —
netfilter: ctnetlink: use helper function to calculate expect ID
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise…
-
Unscored —
x86/mtrr: Check if fixed MTRRs exist before saving them
In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed varian…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42131.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42284.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42285.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42289.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42295.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42304.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42305.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42311.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43856.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43861.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43871.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43882.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43883.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43893.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43914.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-44944.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-44948.html