ALAS2023-2023-179 — Moderate: kernel security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-31436: qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX. CVE-2023-2163: bpf: incorrect verifier pruning due to missing register precision taints, which may lead to out-of-band read/write access due to an incorrect verifier conclusion.

Fixed packages 19

Release	Package	Fixed in
Amazon Linux · 2023	bpftool	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	bpftool-debuginfo	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-debuginfo	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-debuginfo-common-aarch64	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-debuginfo-common-x86_64	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-devel	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-headers	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-libbpf	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-libbpf-devel	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-libbpf-static	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-livepatch-6.1.27-43.48	0:1.0-0.amzn2023
Amazon Linux · 2023	kernel-tools	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-tools-debuginfo	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	kernel-tools-devel	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	perf	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	perf-debuginfo	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	python3-perf	0:6.1.27-43.48.amzn2023
Amazon Linux · 2023	python3-perf-debuginfo	0:6.1.27-43.48.amzn2023

Vulnerabilities 2

Critical 10.0

CVE-2023-2163 Public exploit

Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Sep 20, 2023
High 7.8

CVE-2023-31436

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax ca…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 28, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-2163.html
web
https://alas.aws.amazon.com/cve/html/CVE-2023-31436.html

Moderate: kernel security update (Amazon Linux 2023)

Summary

Fixed packages 19

Vulnerabilities 2

Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax ca…

References