Skip to content
OpenAdvisories
Medium ALAS2023-2024-724 13 CVEs

Moderate: kernel security update (Amazon Linux 2023)

Published Oct 10, 2024 · Updated Oct 14, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-46800: In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue CVE-2024-46783: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() CVE-2024-46782: In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner CVE-2024-46777: In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths CVE-2024-46752: In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() CVE-2024-46750: In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() CVE-2024-46745: In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots CVE-2024-46744: In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size CVE-2024-46743: In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk CVE-2024-46739: In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind CVE-2024-46738: In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() CVE-2024-46734: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between direct IO write and fsync when using same fd CVE-2024-46713: In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization

Fixed packages 21

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.111-120.187 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 perf 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.111-120.187.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.111-120.187.amzn2023

Vulnerabilities 13

  • High 7.8
    CVE-2024-46713

    perf/aux: Fix AUX buffer serialization

    In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the loc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-46734

    btrfs: fix race between direct IO write and fsync when using same fd

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between direct IO write and fsync when using same fd If we have 2 threads that are using the same file descriptor and one of them is doing direct IO writes while the other is …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-46738

    VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

    In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a resource from vmci_resource_table in vmci_resource_remove(), the search is performed using the resour…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-46750

    PCI: Add missing bridge lock to pci_bus_lock()

    In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the cfg_access_lock lockdep effort identified is this sequence: WARNING: CPU: 14 PID: 1 at drivers/pci/pci.c:4886…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-46777

    udf: Avoid excessive partition lengths

    In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would overflow the 32-bits used for block number. Also refuse to mount filesystems where the partition le…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-46800

    sch/netem: fix use after free in netem_dequeue

    In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMIT_STOLEN. The packet is dropped but qdisc_tree_reduce_backlog(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2024-46743

    of/irq: Prevent device address out-of-bounds read in interrupt map walk

    In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When of_irq_parse_raw() is invoked with a device address smaller than the interrupt parent node (from #address-cells pr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-46739

    uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

    In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind For primary VM Bus channels, primary_channel pointer is always NULL. This pointer is valid only for the secondary channel…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-46744

    Squashfs: sanity check symbolic link size

    In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in pick_link" bug. This is caused by an uninitialised page, which is ultimately caused by a corrupted symbol…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-46745

    Input: uinput - reject requests with unreasonable number of slots

    In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-46752

    btrfs: replace BUG_ON() with error handling at update_ref_for_cow()

    In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Instead of a BUG_ON() just return an error, log an error message and abort the transaction in case we find an extent buffer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-46782

    ila: call nf_unregister_net_hooks() sooner

    In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_input [1] Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hoo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-46783

    tcp_bpf: fix return value of tcp_bpf_sendmsg()

    In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the last message triggers the flushing will result in sending a sk_msg larger than the current message siz…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46713.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46734.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46738.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46739.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46743.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46744.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46745.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46750.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46752.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46777.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46782.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46783.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46800.html