High ALAS2023-2023-211 1 CVE

Important: kernel security update (Amazon Linux 2023)

Published Jun 7, 2023 · Updated Jun 12, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48425: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.

Fixed packages 19

Release	Package	Fixed in
Amazon Linux · 2023	bpftool	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	bpftool-debuginfo	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-debuginfo	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-debuginfo-common-aarch64	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-debuginfo-common-x86_64	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-devel	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-headers	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-libbpf	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-libbpf-devel	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-libbpf-static	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-livepatch-6.1.29-50.88	0:1.0-0.amzn2023
Amazon Linux · 2023	kernel-tools	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-tools-debuginfo	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	kernel-tools-devel	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	perf	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	perf-debuginfo	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	python3-perf	0:6.1.29-50.88.amzn2023
Amazon Linux · 2023	python3-perf-debuginfo	0:6.1.29-50.88.amzn2023

Vulnerabilities 1

High 7.8

CVE-2022-48425

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 19, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-48425.html