perf-debuginfo: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0607: netfilter...

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0607: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() CVE-2024-0584: A use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel. This flaw allows a local user to observe a refcnt use-after-free issue when receiving an igmp query packet, leading to a kernel information leak. CVE-2023-6932: A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1. CVE-2023-6622: A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service. CVE-2023-6111: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument sync is true, making it possible to free a catchall set element many times. We recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630. CVE-2023-52879: In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters CVE-2023-52869: In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup CVE-2023-52868: In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow CVE-2023-52864: In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device CVE-2023-52860: In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process CVE-2023-52859: In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails CVE-2023-52854: In the Linux kernel, the following vulnerability has been resolved: padata: Fix refcnt handling in padata_free_shell() CVE-2023-52846: In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() CVE-2023-52843: In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header CVE-2023-52840: In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() CVE-2023-52837: In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_open CVE-2023-52835: In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound CVE-2023-52831: In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Don't offline the last non-isolated CPU CVE-2023-52828: In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program CVE-2023-52813: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATA_RESET CVE-2023-52803: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries CVE-2023-52796: In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlan_route_v6_outbound() helper CVE-2023-52791: In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible CVE-2023-52788: In the Linux kernel, the following vulnerability has been resolved: i915/perf: Fix NULL deref bugs with drm_dbg() calls CVE-2023-52784: In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() CVE-2023-52781: In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usb_get_bos_descriptor()' CVE-2023-52778: In the Linux kernel, the following vulnerability has been resolved: mptcp: deal with large GSO size CVE-2023-52772: In the Linux kernel, the following vulnerability has been resolved: af_unix: fix use-after-free in unix_stream_read_actor() CVE-2023-52763: In the Linux kernel, the following vulnerability has been resolved: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. CVE-2023-52762: In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size CVE-2023-52757: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids CVE-2023-52752: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() CVE-2021-47432: In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek()

Where it's fixed