Skip to content
OpenAdvisories
Medium ALAS2023-2023-285 3 CVEs

Moderate: kernel security update (Amazon Linux 2023)

Published Aug 3, 2023 · Updated Aug 31, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-20593: An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20569: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled?address, potentially leading to information disclosure. CVE-2022-48502: An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

Fixed packages 19

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.41-63.114 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 perf 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.41-63.114.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.41-63.114.amzn2023

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-48502.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-20569.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-20593.html