Skip to content
OpenAdvisories
High ALAS2-2025-2834 6 CVEs

Important: kernel security update (Amazon Linux 2)

Published Apr 14, 2025 · Updated Apr 30, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-52973: In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF CVE-2023-52868: In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow CVE-2023-52867: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow CVE-2023-52845: In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING CVE-2023-52843: In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header CVE-2023-3567: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. In this flaw an attacker with local user access may lead to a system crash or a leak of internal kernel information.

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.330-250.540 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.330-250.540.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.330-250.540.amzn2
Amazon Linux · 2 perf 0:4.14.330-250.540.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.330-250.540.amzn2
Amazon Linux · 2 python-perf 0:4.14.330-250.540.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.330-250.540.amzn2

Vulnerabilities 6

  • High 7.8
    CVE-2023-52973

    vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

    In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF After a call to console_unlock() in vcs_read() the vc_data struct can be freed by vc_deallocate(). Because of that, t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2023-3567

    Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

    A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2023-52845

    tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING

    In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzbot reported the following uninit-value access issue [1]: ===================================================== BUG: KMSA…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2023-52867

    drm/radeon: possible buffer overflow

    In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52843

    llc: verify mac len before reading mac header

    In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with eth_hdr without verifying that the skb has an Ethernet header. Syzbot was able to enter llc_rcv on a tun device. Tu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52868

    thermal: core: prevent potential string overflow

    In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-3567.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52843.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52845.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52867.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52868.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52973.html