Skip to content
OpenAdvisories
High ALAS2023-2024-488 12 CVEs

Important: kernel security update (Amazon Linux 2023)

Published Jan 19, 2024 · Updated Jun 3, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-25744: In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c. CVE-2024-25743: A malicious hypervisor can potentially break confidentiality and integrity of Linux SEV-SNP guests by injecting interrupts. CVE-2024-0646: An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2024-0565: An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. CVE-2024-0193: A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system. CVE-2023-6931: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b. CVE-2023-6817: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free. We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a. CVE-2023-6606: An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information. CVE-2023-6531: A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on. CVE-2023-52881: In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent CVE-2023-52787: In the Linux kernel, the following vulnerability has been resolved: blk-mq: make sure active queue usage is held for bio_integrity_prep() CVE-2023-52654: In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets

Fixed packages 21

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.72-96.166 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 perf 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.72-96.166.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.72-96.166.amzn2023

Vulnerabilities 12

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52654.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52787.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52881.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-6531.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-6606.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-6817.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-6931.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-0193.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-0565.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-0646.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-25743.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-25744.html