Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-53093: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers CVE-2023-53083: In the Linux kernel, the following vulnerability has been resolved: nfsd: don't replace page in rq_pages if it's a continuation of last page CVE-2023-53080: In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdp_umem_reg CVE-2023-53073: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx CVE-2023-53053: In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skb_mac_header() in ndo_start_xmit() CVE-2023-53051: In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() CVE-2023-2194: An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution. CVE-2023-1611: A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea CVE-2023-1583: A NULL pointer dereference has been discovered in the Linux Kernel, in io_file_bitmap_get in io_uring/filetable.c. CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.23-36.46 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.23-36.46.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.23-36.46.amzn2023 |
Vulnerabilities 10
-
Critical 9.8
nfsd: don't replace page in rq_pages if it's a continuation of last page
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't replace page in rq_pages if it's a continuation of last page The splice read calls nfsd_splice_actor to put the pages containing file data into the svc_rqst->rq_pages array. It's …
-
High 7.8
xsk: Add missing overflow check in xdp_umem_reg
In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdp_umem_reg The number of chunks can overflow u32. Make sure to return -EINVAL on overflow. Also remove a redundant u32 cast assigning umem->npgs.
-
Medium 6.7
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…
-
Medium 6.3
A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows …
-
Medium 5.5
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirec…
-
Medium 5.5
A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the…
-
Unscored —
dm crypt: add cond_resched() to dmcrypt_write()
In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may be running for unbounded amount of time, thus we need cond_resched() in it. This commit fixes the following warni…
-
Unscored —
erspan: do not use skb_mac_header() in ndo_start_xmit()
In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skb_mac_header() in ndo_start_xmit() Drivers should not assume skb_mac_header(skb) == skb->data in their ndo_start_xmit(). Use skb_network_offset() and skb_transport_offset…
-
Unscored —
perf/x86/amd/core: Always clear status for idx
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (which contains the unhandled overflow bits) is not being properly masked in some cases, displaying the following warning:…
-
Unscored —
tracing: Do not let histogram values have some modifiers
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-4269.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-1583.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-1611.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-2194.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53051.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53053.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53073.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53080.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53083.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53093.html