Skip to content
OpenAdvisories
High ALAS2023-2024-714 16 CVEs

Important: kernel security update (Amazon Linux 2023)

Published Sep 12, 2024 · Updated Oct 2, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-42098: In the Linux kernel, the following vulnerability has been resolved: crypto: ecdh - explicitly zeroize private_key CVE-2024-42096: In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() CVE-2024-42090: In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER CVE-2024-42084: In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset CVE-2024-42082: In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() CVE-2024-42080: In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Fix potential invalid address access CVE-2024-42076: In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() CVE-2024-42070: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers CVE-2024-42068: In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() CVE-2024-42063: In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode CVE-2024-41092: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CVE-2024-41087: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error CVE-2024-41009: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf CVE-2024-39494: In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name CVE-2024-27397: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout CVE-2023-52887: In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new

Fixed packages 21

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.97-104.177 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 perf 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.97-104.177.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.97-104.177.amzn2023

Vulnerabilities 16

  • High 7.8
    CVE-2024-27397

    netfilter: nf_tables: use timestamp to check for set element timeout

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .in…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-39494

    ima: Fix use-after-free on a dentry's dname.name

    In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name ->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41009

    bpf: Fix overrunning reservations in ringbuf

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41087

    ata: libata-core: Fix double free on error

    In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_alloc() fails, we will jump to the err_out label, which will call devres_release_group(). devres_relea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41092

    drm/i915/gt: Fix potential UAF by revoke of fence registers

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting the following issue triggered by igt@i915_selftest@live@hangcheck on ADL-P and similar machines:…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-42068

    bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

    In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() set_memory_ro() can fail, leaving memory unprotected. Check its return and take it into account as an error.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-52887

    net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new

    In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new This patch enhances error handling in scenarios with RTS (Request to Send) messages arrivi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42063

    bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode

    In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot reported uninit memory usages during map_{lookup,delete}_elem. ========== BUG: KMSAN: uninit-value in __dev_map_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42070

    netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VAL…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42076

    net: can: j1939: Initialize unused data in j1939_send_one()

    In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported kernel-infoleak in raw_recvmsg() [1]. j1939_send_one() creates full frame including unused data, but it doesn't ini…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42080

    RDMA/restrack: Fix potential invalid address access

    In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Fix potential invalid address access struct rdma_restrack_entry's kern_name was set to KBUILD_MODNAME in ib_create_cq(), while if the module exited but forgot del this rdma_res…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42082

    xdp: Remove WARN() from __xdp_reg_mem_model()

    In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in __xdp_reg_mem_model(). The warning occurs only if __mem_id_init_hash_table() returns an error. It returns the erro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42084

    ftruncate: pass a signed offset

    In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate() syscall, using the 32-bit off_t misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42090

    pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting(). If add_setting() returns -EPROBE_DEFER,…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42096

    x86: stop playing stack games in profile_pc()

    In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for timer-based profiling, which isn't really all that relevant any more to begin with, but it also ends up m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42098

    crypto: ecdh - explicitly zeroize private_key

    In the Linux kernel, the following vulnerability has been resolved: crypto: ecdh - explicitly zeroize private_key private_key is overwritten with the key parameter passed in by the caller (if present), or alternatively a newly generated private key. However, …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52887.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-27397.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-39494.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-41009.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-41087.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-41092.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42063.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42068.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42070.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42076.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42080.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42082.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42084.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42090.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42096.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-42098.html