Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-57947: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill CVE-2024-44970: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink CVE-2024-44965: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption CVE-2024-44958: In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance sched_smt_present dec/inc CVE-2024-44948: In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them CVE-2024-44944: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID CVE-2024-44935: In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). CVE-2024-44934: In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port CVE-2024-43914: In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling CVE-2024-43894: In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe CVE-2024-43893: In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero CVE-2024-43889: In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() CVE-2024-43883: In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained CVE-2024-43882: In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage CVE-2024-43873: In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: always initialize seqpacket_allow CVE-2024-43871: In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() CVE-2024-43870: In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exit CVE-2024-43869: In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exec and file release CVE-2024-43856: In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent CVE-2024-43855: In the Linux kernel, the following vulnerability has been resolved: md: fix deadlock between mddev_suspend and flush bio CVE-2024-43854: In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media CVE-2024-43853: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() CVE-2024-43837: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT CVE-2024-43834: In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of page_pool_destroy() CVE-2024-43830: In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() CVE-2024-43828: In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit CVE-2024-43823: In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() CVE-2024-43817: In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio CVE-2024-42321: In the Linux kernel, the following vulnerability has been resolved: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE CVE-2024-42316: In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix div-by-zero in vmpressure_calc_level() CVE-2024-42312: In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid CVE-2024-42307: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path CVE-2024-42306: In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer CVE-2024-42305: In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed CVE-2024-42304: In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole CVE-2024-42302: In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal CVE-2024-42299: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed CVE-2024-42292: In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() CVE-2024-42285: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs CVE-2024-42283: In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops CVE-2024-42281: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size CVE-2024-42276: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing conditio
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.106-116.188 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.106-116.188.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.106-116.188.amzn2023 |
Vulnerabilities 52
-
Critical 9.8
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_…
-
Critical 9.8
usb: vhci-hcd: Do not drop references before new references are gained
In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. …
-
Critical 9.8
net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink When all the strides in a WQE have been consumed, the WQE is unlinked from the WQ linked list (mlx5_wq_ll_pop()). For SHAMPO, it is possib…
-
Critical 9.8
netfilter: nf_set_pipapo: fix initial map fill
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each ro…
-
High 7.8
scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() The function mpi3mr_get_all_tgt_info() has four issues: 1) It calculates valid entry length in alltgt_info assuming the header part of th…
-
High 7.8
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider th…
-
High 7.8
nvme-pci: add missing condition check for existence of mapped data
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvme_map_data() is called when request has physical segments, hence the nvme_unmap_data() should have same condition to avoi…
-
High 7.8
fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed If an NTFS file system is mounted to another system with different PAGE_SIZE from the original system, log->page_size will cha…
-
High 7.8
ext4: make sure the first directory block is not a hole
In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are r…
-
High 7.8
udf: Avoid using corrupted block bitmap buffer
In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the…
-
High 7.8
leds: trigger: Unregister sysfs attributes before calling deactivate()
In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the acti…
-
High 7.8
dma: fix call order in dmam_free_coherent
In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent dmam_free_coherent() frees a DMA allocation, which makes the freed vaddr available for reuse, then calls devres_destroy() to remove and free the data…
-
High 7.8
exec: Fix ToCToU between perm check and set-uid/gid usage
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permission checking is done against the file's metadata at that moment, and on succe…
-
High 7.8
net: bridge: mcast: wait for previous gc cycles when removing port
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after-free[1] which is caused because the bridge doesn't make sure that all previous garbage has been colle…
-
High 7.3
xfs: fix log recovery buffer allocation for the legacy h_size fixup
In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy h_size fixup Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values use…
-
High 7.1
mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines
In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 ("mm: huge_memory: don't force huge page alignment on 32 bit"…
-
High 7.0
cgroup/cpuset: Prevent UAF in proc_cpuset_show()
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/cpuset is read as reported in [1]. This can be reproduced by the following methods: 1.add an mdelay(1000) before …
-
Unscored —
scsi: mpi3mr: Bad drive in topology results kernel crash
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees …
-
Unscored —
netfilter: nf_tables: prefer nft_chain_validate
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prefer nft_chain_validate nft_chain_validate already performs loop detection because a cycle will result in a call stack overflow (ctx->level >= NFT_JUMP_STACK_SIZE). It…
-
Unscored —
scsi: mpi3mr: Sanitise num_phys
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask, values larger then size of this field shouldn't be allowed.
-
Unscored —
net/mlx5: Fix missing lock on sync reset reload
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix missing lock on sync reset reload On sync reset reload work, when remote host updates devlink on reload actions performed on that host, it misses taking devlink lock before call…
-
Unscored —
netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().
In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id], but the function is exposed to user …
-
Unscored —
netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). We had a report that iptables-restore sometimes triggered null-ptr-deref at boot time. [0] The problem is that iptable_nat…
-
Unscored —
bpf: Fix a segment issue when downgrading gso_size
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_size because it may trigger a BUG_ON() later when the skb is segmented as described in [1,2].
-
Unscored —
net: nexthop: Initialize all fields in dumped nexthops
In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two reserved fields that are not initialized by nla_put_nh_group(), and carry garbage. This can be observed …
-
Unscored —
kobject_uevent: Fix OOB access within zap_modalias_env()
In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not …
-
Unscored —
PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot-removal of the same portion of the hierarchy: The dpc_…
-
Unscored —
ext4: check dot and dotdot of dx_root before making dir indexed
In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: f…
-
Unscored —
cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path Dan Carpenter reported a Smack static checker warning: fs/smb/client/cifsfs.c:1981 init_cifs() error: we prev…
-
Unscored —
sysctl: always initialize i_uid/i_gid
In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core so set_ownership() can safely skip setting them. Commit 5ec27ec735ba ("fs/proc/proc_sysctl.c: fix the…
-
Unscored —
mm/mglru: fix div-by-zero in vmpressure_calc_level()
In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix div-by-zero in vmpressure_calc_level() evict_folios() uses a second pass to reclaim folios that have gone through page writeback and become clean before it finishes the first pa…
-
Unscored —
net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
In the Linux kernel, the following vulnerability has been resolved: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 (…
-
Unscored —
net: missing check virtio
In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again 1. After the skb_segment function the buffer may become non-linear (nr_frags != 0)…
-
Unscored —
PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() If IORESOURCE_MEM is not provided in Device Tree due to any error, resource_list_first_type() wi…
-
Unscored —
ext4: fix infinite loop when replaying fast_commit
In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit When doing fast_commit replay an infinite loop may occur due to an uninitialized extent_status struct. ext4_ext_determine_insert_hole() does…
-
Unscored —
xdp: fix invalid wait context of page_pool_destroy()
In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of page_pool_destroy() If the driver uses a page pool, it creates a page pool with page_pool_create(). The reference count of page pool is 1 as default. A page p…
-
Unscored —
bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT When loading a EXT program without specifying `attr->attach_prog_fd`, the `prog->aux->dst_prog` will be null. At…
-
Unscored —
block: initialize integrity buffer to zero before writing it to media
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For…
-
Unscored —
md: fix deadlock between mddev_suspend and flush bio
In the Linux kernel, the following vulnerability has been resolved: md: fix deadlock between mddev_suspend and flush bio Deadlock occurs when mddev is being suspended while some flush bio is in progress. It is a complex issue. T1. the first flush is at the en…
-
Unscored —
perf: Fix event leak upon exec and file release
In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exec and file release The perf pending task work is never waited upon the matching event release. In the case of a child event, released via free_event() directly, t…
-
Unscored —
perf: Fix event leak upon exit
In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exit When a task is scheduled out, pending sigtrap deliveries are deferred to the target task upon resume to userspace via task_work. However failures while adding a…
-
Unscored —
devres: Fix memory leakage caused by driver API devm_free_percpu()
In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed b…
-
Unscored —
vhost/vsock: always initialize seqpacket_allow
In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: always initialize seqpacket_allow There are two issues around seqpacket_allow: 1. seqpacket_allow is not initialized when socket is created. Thus if features are never set, it wi…
-
Unscored —
padata: Fix possible divide-by-0 panic in padata_mt_helper()
In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily reproducible divide-by-0 panic in padata.c at bootup time. [ 10.017908] Oops: divide error: 0000 1 PR…
-
Unscored —
serial: core: check uartclk for zero to avoid divide by zero
In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baud_base can result in uartclk being zero, which will result in a divide by zero error …
-
Unscored —
drm/client: fix null pointer dereference in drm_client_modeset_probe
In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe In drm_client_modeset_probe(), the return value of drm_mode_duplicate() is assigned to modeset->mode, which will lead to a…
-
Unscored —
md/raid5: avoid BUG_ON() while continue reshape after reassembling
In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, follo…
-
Unscored —
sctp: Fix null-ptr-deref in reuseport_add_sock().
In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). syzbot reported a null-ptr-deref while accessing sk2->sk_reuseport_cb in reuseport_add_sock(). [0] The repro first creates a listener with SO…
-
Unscored —
netfilter: ctnetlink: use helper function to calculate expect ID
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise…
-
Unscored —
x86/mtrr: Check if fixed MTRRs exist before saving them
In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed varian…
-
Unscored —
sched/smt: Fix unbalance sched_smt_present dec/inc
In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance sched_smt_present dec/inc I got the following warn report while doing stress test: jump label: negative count! WARNING: CPU: 3 PID: 38 at kernel/jump_label.c:263 stat…
-
Unscored —
x86/mm: Fix pti_clone_pgtable() alignment assumption
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53037.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-53320.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-39472.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-41042.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42159.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42258.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42259.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42268.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42269.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42270.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42276.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42281.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42283.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42285.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42292.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42299.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42302.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42304.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42305.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42306.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42307.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42312.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42316.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-42321.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43817.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43823.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43828.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43830.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43834.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-43837.html