Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5717: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer. We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06. CVE-2023-54069: In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow CVE-2023-5090: x86: KVM: SVM: always update the x2avic msr interception CVE-2023-46862: An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur. CVE-2023-46813: An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.61-85.141 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.61-85.141.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.61-85.141.amzn2023 |
Vulnerabilities 5
-
High 7.8CVE-2023-5717 Public exploit
Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's si…
-
High 7.0CVE-2023-46813 Public exploit
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO regi…
-
Medium 6.0
Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.
-
Unscored —
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_u…
-
Unscored —
ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow When we calculate the end position of ext4_free_extent, this position may be exactly where ext4_lblk_t (i.e. uint) overflows. For examp…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-46813.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-46862.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-5090.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-54069.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-5717.html