Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0639: A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system. CVE-2023-54313: In the Linux kernel, the following vulnerability has been resolved: ovl: fix null pointer dereference in ovl_get_acl_rcu() CVE-2023-54293: In the Linux kernel, the following vulnerability has been resolved: bcache: fixup btree_cache_wait list damage CVE-2023-54209: In the Linux kernel, the following vulnerability has been resolved: block: fix blktrace debugfs entries leakage CVE-2023-54189: In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup CVE-2023-54171: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe CVE-2023-54153: In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount failed after enabling quotas CVE-2023-54094: In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation CVE-2023-54067: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting free space root from the dirty cow roots list CVE-2023-54032: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting quota root from the dirty cow roots list CVE-2023-53998: In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data CVE-2023-53863: In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps CVE-2023-53852: In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_secret_store CVE-2023-53844: In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on swapout move error CVE-2023-53815: In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() CVE-2023-53793: In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perf_env memory leak CVE-2023-53792: In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_ctrl_secret CVE-2023-53768: In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fix out-of-bounds access when allocating config buffers CVE-2023-53731: In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() CVE-2023-53730: In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost CVE-2023-53713: In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode CVE-2023-53681: In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent CVE-2023-53674: In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() CVE-2023-53670: In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix dev_pm_qos memleak CVE-2023-53668: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issue on reading trace_pipe CVE-2023-53656: In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown CVE-2023-53619: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free CVE-2023-53613: In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free CVE-2023-53601: In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb mac_header is set CVE-2023-53560: In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to hist_vars if they have referenced variables CVE-2023-53461: In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly for request completions on exit CVE-2023-53446: In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free CVE-2023-53441: In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem CVE-2023-53420: In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() CVE-2023-53391: In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs CVE-2023-53380: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request CVE-2023-53377: In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later CVE-2023-53362: In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices CVE-2023-53357: In the Linux kernel, the following vulnerability has been resolved: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter CVE-2023-53343: In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). CVE-2023-53333: In the Linux kernel, the following vulnerability has been resolved: netfilter:
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.41-63.109 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.41-63.109.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.41-63.109.amzn2023 |
Vulnerabilities 55
-
Critical 9.8
net: prevent skb corruption on frag list segmentation
In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: [ 62.624003] BUG: kernel NULL pointer der…
-
High 8.2
netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nf_conntrack_dccp_packet() has an unique: dh = skb_header_pointer(skb, dataoff, sizeof(_d…
-
High 8.1
SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() After the listener svc_sock is freed, and before invoking svc_tcp_accept() for the established child sock, there is a window that the newsock re…
-
High 7.8
Out-of-bounds write in Linux kernel's net/sched: sch_qfq component
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated accordin…
-
High 7.8CVE-2023-3776 Public exploit
Use-after-free in Linux kernel's net/sched: cls_fw component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the refere…
-
High 7.8
ipv6/addrconf: fix a potential refcount underflow for idev
In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout. There is a …
-
High 7.8
cifs: prevent use-after-free by freeing the cfile later
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2_compound_op we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress …
-
High 7.8
PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free Struct pcie_link_state->downstream is a pointer to the pci_dev of function 0. Previously we retained that pointer when r…
-
High 7.8
tracing/histograms: Add histograms to hist_vars if they have referenced variables
In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to hist_vars if they have referenced variables Hist triggers can have referenced variables without having direct variables fields. This can be the case if r…
-
High 7.8
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start() fails (for example due to a register_nf_conntrack_bpf() failure), the nf_conntrack_helper_fini() cle…
-
High 7.8
clk: Fix memory leak in devm_clk_notifier_register()
In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't g…
-
High 7.8
arm64: sme: Use STR P to clear FFR context field in streaming SVE mode
In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate register which can vary between 16 and 256 bits in size depending upon the configured vector leng…
-
High 7.8
regmap-irq: Fix out-of-bounds access when allocating config buffers
In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fix out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmap_add_irq_chip_fwnode(), the intent is to allocate a m…
-
High 7.8
drm/ttm: Don't leak a resource on swapout move error
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on swapout move error If moving the bo to system for swapout failed, we were leaking a resource. Fix.
-
High 7.8
btrfs: fix race when deleting free space root from the dirty cow roots list
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting free space root from the dirty cow roots list When deleting the free space tree we are deleting the free space root from the list fs_info->dirty_cowonly_roots wi…
-
High 7.8
ext4: turn quotas off if mount failed after enabling quotas
In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount failed after enabling quotas Yi found during a review of the patch "ext4: don't BUG on inconsistent journal feature" that when ext4_mark_recovery_complete() ret…
-
High 7.1
md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
In the Linux kernel, the following vulnerability has been resolved: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter If we write a large number to md/bitmap_set_bits, md_bitmap_checkpage() will return -EINVAL because 'page >= bitmap->pages', but t…
-
High 7.1
ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfs_list_ea fs/ntfs3/xattr.c:191 [inline] BUG: KASAN: …
-
High 7.0
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a n…
-
Medium 5.5
bpf: Fix memleak due to fentry attach failure
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memleak due to fentry attach failure If it fails to attach fentry, the allocated bpf trampoline image will be left in the system. That can be verified by checking /proc/kallsyms. Thi…
-
Medium 5.5
btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
In the Linux kernel, the following vulnerability has been resolved: btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile Callers of `btrfs_reduce_alloc_profile` expect it to return exactly one allocation profile flag, and failing to do so may ul…
-
Medium 5.5
net: fix net_dev_start_xmit trace event vs skb_transport_offset()
In the Linux kernel, the following vulnerability has been resolved: net: fix net_dev_start_xmit trace event vs skb_transport_offset() After blamed commit, we must be more careful about using skb_transport_offset(), as reminded us by syzbot: WARNING: CPU: 0 PI…
-
Medium 5.5
md/raid10: fix wrong setting of max_corr_read_errors
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of max_corr_read_errors There is no input check when echo md/max_read_errors and overflow might occur. Add check of input number.
-
Medium 5.5
ext2/dax: Fix ext2_setsize when len is page aligned
In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned PAGE_ALIGN(x) macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. …
-
Medium 5.5
icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). With some IPv6 Ext Hdr (RPL, SRv6, etc.), we can send a packet that has the link-local address as src and dst IP and wil…
-
Medium 5.5
bus: fsl-mc: don't assume child devices are all fsl-mc devices
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash [1] when trying to bind a fsl-mc…
-
Medium 5.5
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request There are two check of 'mreplace' in raid10_sync_request(). In the first check, 'need_replace' will be set and 'mreplace' will…
-
Medium 5.5
shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs As the ramfs-based tmpfs uses ramfs_init_fs_context() for the init_fs_context method, which allocates fc->s_fs_info, use ram…
-
Medium 5.5
bpf: cpumap: Fix memory leak in cpu_map_update_elem
In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem Syzkaller reported a memory leak as follows: BUG: memory leak unreferenced object 0xff110001198ef748 (size 192): comm "syz-executor.3", pid…
-
Medium 5.5
Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.
-
Medium 4.0
Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
-
Unscored —
An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness dur…
-
Unscored —CVE-2023-44466 EPSS 45%
An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness err…
-
Unscored —
tracing: Fix null pointer dereference in tracing_err_log_open()
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix null pointer dereference in tracing_err_log_open() Fix an issue in function 'tracing_err_log_open'. The function doesn't call 'seq_open' if the file is opened only with write per…
-
Unscored —
io_uring: wait interruptibly for request completions on exit
In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly for request completions on exit WHen the ring exits, cleanup is done and the final cancelation and waiting on completions is done by io_ring_exit_work. That funct…
-
Unscored —
bonding: do not assume skb mac_header is set
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb mac_header is set Drivers must not assume in their ndo_start_xmit() that skbs have their mac_header set. skb->data is all what is needed. bonding seems to be one of…
-
Unscored —
dax: Fix dax_mapping_release() use after free
In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test of removing a device-dax region provider (like modprobe -r dax_hmem) yields: kobject: 'mapping0' (ffff93eb460…
-
Unscored —
drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown The driver needs to migrate the perf context if the current using CPU going to teardown. By the time calling the cpuhp::tea…
-
Unscored —
ring-buffer: Fix deadloop issue on reading trace_pipe
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issue on reading trace_pipe Soft lockup occurs when reading file 'trace_pipe': watchdog: BUG: soft lockup - CPU#6 stuck for 22s! [cat:4488] [...] RIP: 0010:ring_buff…
-
Unscored —
nvme-core: fix dev_pm_qos memleak
In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix dev_pm_qos memleak Call dev_pm_qos_hide_latency_tolerance() in the error unwind patch to avoid following kmemleak:- blktests (master) # kmemleak-clear; ./check nvme/044; blktes…
-
Unscored —
bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent In some specific situations, the return value of __bch_btree_node_alloc may be NULL. This may lead to a potential NU…
-
Unscored —
blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost adjust_inuse_and_calc_cost() use spin_lock_irq() and IRQ will be enabled when unlock. DEADLOCK might happen if we have held oth…
-
Unscored —
netlink: fix potential deadlock in netlink_set_err()
In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for …
-
Unscored —
nvme-core: fix memory leak in dhchap_ctrl_secret
In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_ctrl_secret Free dhchap_secret in nvme_ctrl_dhchap_ctrl_secret_store() before we return when nvme_auth_generate_key() returns error.
-
Unscored —
perf tool x86: Fix perf_env memory leak
In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perf_env memory leak Found by leak sanitizer: ``` ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 byte(s) in 1 object(s) allocated from: #0 0x7f295…
-
Unscored —
posix-timers: Prevent RT livelock in itimer_delete()
In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry loop when the timer is concurrently expired. On non-RT kernels this just spin-waits until the timer callback h…
-
Unscored —
nvme-core: fix memory leak in dhchap_secret_store
In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_secret_store Free dhchap_secret in nvme_ctrl_dhchap_secret_store() before we return fix following kmemleack:- unreferenced object 0xffff8886376ea800 (size…
-
Unscored —
netlink: do not hard code device address lenth in fdb dumps
In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev devices do not have a six bytes address [1] Replace ETH_ALEN by dev->addr_len. [1] (Case of a devic…
-
Unscored —
hwrng: virtio - Fix race on data_avail and actual data
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of …
-
Unscored —
btrfs: fix race when deleting quota root from the dirty cow roots list
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting quota root from the dirty cow roots list When disabling quotas we are deleting the quota root from the list fs_info->dirty_cowonly_roots without taking the lock …
-
Unscored —
tracing: Fix memory leak of iter->temp when reading trace_pipe
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe kmemleak reports: unreferenced object 0xffff88814d14e200 (size 256): comm "cat", pid 336, jiffies 4294871818 (age 779.490s) hex …
-
Unscored —
pstore/ram: Add check for kstrdup
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.
-
Unscored —
block: fix blktrace debugfs entries leakage
In the Linux kernel, the following vulnerability has been resolved: block: fix blktrace debugfs entries leakage Commit 99d055b4fd4b ("block: remove per-disk debugfs files in blk_unregister_queue") moves blk_trace_shutdown() from blk_release_queue() to blk_unr…
-
Unscored —
bcache: fixup btree_cache_wait list damage
In the Linux kernel, the following vulnerability has been resolved: bcache: fixup btree_cache_wait list damage We get a kernel crash about "list_add corruption. next->prev should be prev (ffff9c801bc01210), but was ffff9c77b688237c. (next=ffffae586d8afe68)." …
-
Unscored —
ovl: fix null pointer dereference in ovl_get_acl_rcu()
In the Linux kernel, the following vulnerability has been resolved: ovl: fix null pointer dereference in ovl_get_acl_rcu() Following process: P1 P2 path_openat link_path_walk may_lookup inode_permission(rcu) ovl_permission acl_permission_check check_acl get_c…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-48502.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-3611.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-3776.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-39197.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-44466.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-51043.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-52885.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53167.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53189.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53221.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53243.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53312.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53313.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53323.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53333.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53343.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53357.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53362.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53377.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53380.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53391.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53420.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53441.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53446.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53461.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53560.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53601.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53613.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53619.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53656.html