Skip to content
OpenAdvisories
High ALAS2023-2023-349 2 CVEs

Important: kernel security update (Amazon Linux 2023)

Published Sep 14, 2023 · Updated Sep 20, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-2430: A vulnerability was found due to a missing lock for the IOPOLL in io_cqring_event_overflow() in io_uring.c in the Linux kernel. This flaw allows a local attacker with user privileges to trigger a denial of service. CVE-2023-21264: KVM: arm64: Prevent unconditional donation of unmapped regions from the host NOTE: https://source.android.com/docs/security/bulletin/2023-08-01 NOTE: https://git.kernel.org/linus/09cce60bddd6461a93a5bf434265a47827d1bc6f

Fixed packages 19

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.52-71.125 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 perf 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.52-71.125.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.52-71.125.amzn2023

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-21264.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2430.html