High ALAS2023-2023-233 1 CVE

Important: kernel security update (Amazon Linux 2023)

Published Jun 28, 2023 · Updated Jun 29, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-1206: An issue was found in the Linux kernel's IPv6 TCP connection tracking code, which could lead to high CPU usage with certain traffic patterns.

Fixed packages 19

Release	Package	Fixed in
Amazon Linux · 2023	bpftool	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	bpftool-debuginfo	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-debuginfo	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-debuginfo-common-aarch64	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-debuginfo-common-x86_64	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-devel	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-headers	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-libbpf	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-libbpf-devel	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-libbpf-static	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-livepatch-6.1.34-58.102	0:1.0-0.amzn2023
Amazon Linux · 2023	kernel-tools	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-tools-debuginfo	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	kernel-tools-devel	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	perf	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	perf-debuginfo	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	python3-perf	0:6.1.34-58.102.amzn2023
Amazon Linux · 2023	python3-perf-debuginfo	0:6.1.34-58.102.amzn2023

Vulnerabilities 1

Unscored —

CVE-2023-1206 Public exploit

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a use…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 30, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-1206.html