Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-49700: In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation CVE-2022-49657: In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case CVE-2022-49649: In the Linux kernel, the following vulnerability has been resolved: xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue CVE-2022-49647: In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading css_sets for migration CVE-2022-49639: In the Linux kernel, the following vulnerability has been resolved: cipso: Fix data-races around sysctl. CVE-2022-49638: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. CVE-2022-49620: In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipc_sk_create() CVE-2022-49607: In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() CVE-2022-49602: In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. CVE-2022-49601: In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. CVE-2022-49595: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. CVE-2022-49593: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. CVE-2022-49590: In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_llm_reports. CVE-2022-49587: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. CVE-2022-49567: In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpol_rebind_policy() CVE-2022-36879: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. CVE-2022-36123: A memory access flaw was found in the Linux kernel's XEN hypervisor for the virtual machine. This flaw allows a local user to crash the system or potentially escalate their privileges on the system. CVE-2021-33655: An out-of-bounds write flaw was found in the Linux kernel’s framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUT_VSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.290-217.505 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.290-217.505.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.290-217.505.amzn2 |
Vulnerabilities 18
-
High 7.8
cgroup: Use separate src/dst nodes when preloading css_sets for migration
In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading css_sets for migration Each cset (css_set) is pinned by its tasks. When we're moving tasks around across csets for a migration, we need to h…
-
High 7.8
mm/slub: add missing TID updates on slab deactivation
In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slab_alloc_node() assumes that c->slab is stable as long as the TID stays the same. However, two places in __slab_alloc()…
-
Medium 5.5
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a…
-
Medium 5.5
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpol_rebind_policy() mpol_set_nodemask()(mm/mempolicy.c) does not set up nodemask when pol->mode is MPOL_LOCAL. Check pol->mode before access pol->w.cpuset_m…
-
Medium 5.5
net: tipc: fix possible refcount leak in tipc_sk_create()
In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipc_sk_create() Free sk in case tipc_sk_insert() fails.
-
Medium 5.5
xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
In the Linux kernel, the following vulnerability has been resolved: xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue xenvif_rx_next_skb() is expecting the rx queue not being empty, but in case the loop in xenvif_rx_action() is doing mul…
-
Medium 5.5
usbnet: fix memory leak in error case
In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer
-
Medium 4.7
tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lowat, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
-
Medium 4.7
igmp: Fix data-races around sysctl_igmp_llm_reports.
In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_llm_reports. While reading sysctl_igmp_llm_reports, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be p…
-
Medium 4.7
tcp: Fix a data-race around sysctl_tcp_probe_interval.
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. While reading sysctl_tcp_probe_interval, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
-
Medium 4.7
tcp: Fix a data-race around sysctl_tcp_probe_threshold.
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. While reading sysctl_tcp_probe_threshold, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
-
Medium 4.7
tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. While reading sysctl_tcp_fwmark_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
-
Medium 4.7
ip: Fix a data-race around sysctl_fwmark_reflect.
In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. While reading sysctl_fwmark_reflect, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
-
Medium 4.7
perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() Yang Jihing reported a race between perf_event_set_output() and perf_mmap_close(): CPU1 CPU2 perf_mmap_close(e2)…
-
Medium 4.7
icmp: Fix data-races around sysctl.
In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races.
-
Medium 4.7
cipso: Fix data-races around sysctl.
In the Linux kernel, the following vulnerability has been resolved: cipso: Fix data-races around sysctl. While reading cipso sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races.
-
Unscored —
When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
-
Unscored —
The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen P…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-33655.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-36123.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-36879.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49567.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49587.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49590.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49593.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49595.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49601.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49602.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49607.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49620.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49638.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49639.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49647.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49649.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49657.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49700.html