{
  "cveId": "CVE-2024-0584",
  "url": "https://patchblox.com/security/cve/CVE-2024-0584",
  "summary": "CVE-2024-0584 is fixed in 20 products on 1 platform, first by ALAS2023-2023-461, released December 13, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "perf-debuginfo: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2024-0607:\n\tnetfilter...",
  "description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2024-0607:\n\tnetfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()\n\nCVE-2024-0584:\n\tA use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel. This flaw allows a local user to observe a refcnt use-after-free issue when receiving an igmp query packet, leading to a kernel information leak.\n\nCVE-2023-6932:\n\tA use-after-free vulnerability in the Linux kernel\u0027s ipv4: igmp component can be exploited to achieve local privilege escalation.\n\nA race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.\n\nWe recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.\n\nCVE-2023-6622:\n\tA null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.\n\nCVE-2023-6111:\n\tA use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument sync is true, making it possible to free a catchall set element many times.\n\nWe recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630.\n\nCVE-2023-52879:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Have trace_event_file have ref counters\n\nCVE-2023-52869:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\npstore/platform: Add check for kstrdup\n\nCVE-2023-52868:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: prevent potential string overflow\n\nCVE-2023-52864:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: wmi: Fix opening of char device\n\nCVE-2023-52860:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process\n\nCVE-2023-52859:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nperf: hisi: Fix use-after-free when register pmu fails\n\nCVE-2023-52854:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\npadata: Fix refcnt handling in padata_free_shell()\n\nCVE-2023-52846:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nhsr: Prevent use after free in prp_create_tagged_frame()\n\nCVE-2023-52843:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nllc: verify mac len before reading mac header\n\nCVE-2023-52840:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nInput: synaptics-rmi4 - fix use after free in rmi_unregister_function()\n\nCVE-2023-52837:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnbd: fix uaf in nbd_open\n\nCVE-2023-52835:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Bail out early if the request AUX area is out of bound\n\nCVE-2023-52831:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ncpu/hotplug: Don\u0027t offline the last non-isolated CPU\n\nCVE-2023-52828:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Detect IP == ksym.end as part of BPF program\n\nCVE-2023-52813:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Fix hungtask for PADATA_RESET\n\nCVE-2023-52803:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Fix RPC client cleaned up the freed pipefs dentries\n\nCVE-2023-52796:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: add ipvlan_route_v6_outbound() helper\n\nCVE-2023-52791:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ni2c: core: Run atomic i2c xfer when !preemptible\n\nCVE-2023-52788:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ni915/perf: Fix NULL deref bugs with drm_dbg() calls\n\nCVE-2023-52784:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nbonding: stop the device in bond_setup_by_slave()\n\nCVE-2023-52781:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: config: fix iteration issue in \u0027usb_get_bos_descriptor()\u0027\n\nCVE-2023-52778:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: deal with large GSO size\n\nCVE-2023-52772:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: fix use-after-free in unix_stream_read_actor()\n\nCVE-2023-52763:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.\n\nCVE-2023-52762:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: fix implicit overflow on virtio_max_dma_size\n\nCVE-2023-52757:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential deadlock when releasing mids\n\nCVE-2023-52752:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free bug in cifs_debug_data_proc_show()\n\nCVE-2021-47432:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nlib/generic-radix-tree.c: Don\u0027t overflow in peek()",
  "published": "2023-12-13T20:28:00Z",
  "severity": "important",
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.66-91.160",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "fix": "ALAS2023-2023-461",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
      "released": "2023-12-13T20:28:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}