Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-6915: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. CVE-2023-46838: A flaw has been found in Xen. An unprivileged guest can cause Denial of Service (DoS) of the host by sending network packets to the backend, causing the backend to crash.
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.75-99.163 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.75-99.163.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.75-99.163.amzn2023 |
Vulnerabilities 2
-
High 7.5
Linux: netback processing of zero-length transmit fragment
Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred da…
-
Medium 6.2
Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.