Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-42096: In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() CVE-2024-42090: In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER CVE-2024-42070: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers CVE-2024-42068: In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() CVE-2024-42063: In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode CVE-2024-41092: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CVE-2024-41009: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf CVE-2024-27397: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.97-104.177 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.97-104.177.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.97-104.177.amzn2023 |
Vulnerabilities 8
-
High 7.8
netfilter: nf_tables: use timestamp to check for set element timeout
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .in…
-
High 7.8
bpf: Fix overrunning reservations in ringbuf
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos i…
-
High 7.8
drm/i915/gt: Fix potential UAF by revoke of fence registers
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting the following issue triggered by igt@i915_selftest@live@hangcheck on ADL-P and similar machines:…
-
High 7.8
bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() set_memory_ro() can fail, leaving memory unprotected. Check its return and take it into account as an error.
-
Unscored —
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot reported uninit memory usages during map_{lookup,delete}_elem. ========== BUG: KMSAN: uninit-value in __dev_map_…
-
Unscored —
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VAL…
-
Unscored —
pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting(). If add_setting() returns -EPROBE_DEFER,…
-
Unscored —
x86: stop playing stack games in profile_pc()
In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for timer-based profiling, which isn't really all that relevant any more to begin with, but it also ends up m…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-27397.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-41009.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-41092.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42063.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42068.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42070.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42090.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42096.html