Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53626: In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory CVE-2022-50516: In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sb_lvbptr
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-280.708 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-280.708.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-280.708.amzn2 |
Vulnerabilities 2
-
High 7.8
ext4: fix possible double unlock when moving a directory
In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory
-
Unscored —
fs: dlm: fix invalid derefence of sb_lvbptr
In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sb_lvbptr I experience issues when putting a lkbsb on the stack and have sb_lvbptr field to a dangled pointer while not using DLM_LKF_VALBLK. It will crash w…