Skip to content
OpenAdvisories
High ALAS2023-2023-422 9 CVEs

Important: kernel security update (Amazon Linux 2023)

Published Oct 30, 2023 · Updated Jul 3, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0641: A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel's TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system. CVE-2023-52559: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_suspend() CVE-2023-52523: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets CVE-2023-52522: In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() CVE-2023-52481: In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround CVE-2023-52477: In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors CVE-2023-52476: In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses CVE-2023-39191: An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code in the context of the kernel. CVE-2023-34324: A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests.

Fixed packages 20

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.59-84.139 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 perf 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.59-84.139.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.59-84.139.amzn2023

Vulnerabilities 9

  • High 8.8
    CVE-2023-52522

    net: fix possible store tearing in neigh_periodic_work()

    In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.2
    CVE-2023-39191

    Kernel: ebpf: insufficient stack type checks in dynptr

    An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-52523

    bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets

    In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH map and an sk_msg program user can steer messages sent from one TCP socket (s1) to actually egress from…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-0641

    Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke

    A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 4.9
    CVE-2023-34324

    Possible deadlock in Linux kernel event handling

    Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an eve…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2023-52481

    arm64: errata: Add Cortex-A520 speculative unprivileged load workaround

    In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On an affected Cortex-A520 core, a speculatively executed…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-52476

    perf/x86/lbr: Filter vsyscall addresses

    In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses We found that a panic can occur when a vsyscall is made while LBR sampling is active. If the vsyscall is interrupted (NMI) for perf sampling, this call…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52477

    usb: hub: Guard against accesses to uninitialized BOS descriptors

    In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52559

    iommu/vt-d: Avoid memory allocation in iommu_suspend()

    In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_suspend() The iommu_suspend() syscore suspend callback is invoked with IRQ disabled. Allocating memory with the GFP_KERNEL flag may re-enable IRQs…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-34324.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39191.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52476.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52477.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52481.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52522.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52523.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52559.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-0641.html