Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3269: A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement without properly acquiring the MM write lock, leading to use-after-free issues. An unprivileged local user could use this flaw to compromise the kernel and escalate their privileges.
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.34-59.116 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.34-59.116.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.34-59.116.amzn2023 |
Vulnerabilities 1
-
High 7.8CVE-2023-3269 Public exploit
Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal
A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbit…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-3269.html