{
  "cveId": "CVE-2024-1627",
  "url": "https://patchblox.com/security/cve/CVE-2024-1627",
  "summary": "CVE-2024-1627 is fixed in 21 products on 1 platform, first by ALAS2023-2024-784, released December 5, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kernel-libbpf-static: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2024-58239:\n\tIn the L...",
  "description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2024-58239:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ntls: stop recv() if initial process_rx_list gave us non-DATA\n\nCVE-2024-27431:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ncpumap: Zero-initialise xdp_rxq_info struct before running XDP program\n\nCVE-2024-27417:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix potential \u0022struct net\u0022 leak in inet6_rtm_getaddr()\n\nCVE-2024-27415:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: confirm multicast packets before passing them up the stack\n\nCVE-2024-27414:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nrtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back\n\nCVE-2024-27413:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nefi/capsule-loader: fix incorrect allocation size\n\nCVE-2024-27404:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix data races on remote_id\n\nCVE-2024-27403:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_flow_offload: reset dst in route object after setting up flow\n\nCVE-2024-27024:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: fix WARNING in rds_conn_connect_if_down\n\nCVE-2024-27023:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmd: Fix missing release of \u0027active_io\u0027 for flush\n\nCVE-2024-26857:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: make sure to pull inner header in geneve_rx()\n\nCVE-2024-26852:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: avoid possible UAF in ip6_route_mpath_notify()\n\nCVE-2024-26851:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_h323: Add protection for bmp length out of range\n\nCVE-2024-26849:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: add nla be16/32 types to minlen array\n\nCVE-2024-26845:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: core: Add TMF to tmr_list handling\n\nCVE-2024-26844:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix WARNING in _copy_from_iter\n\nCVE-2024-26843:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nefi: runtime: Fix potential overflow of soft-reserved region size\n\nCVE-2024-26840:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: fix memory leak in cachefiles_add_cache()\n\nCVE-2024-26837:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: switchdev: Skip MDB replays of deferred events on offload\n\nCVE-2024-26835:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: set dormant flag on hook register failure\n\nCVE-2024-26832:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmm: zswap: fix missing folio cleanup in writeback race path\n\nCVE-2024-26805:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: Fix kernel-infoleak-after-free in __skb_datagram_iter\n\nCVE-2024-26804:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_tunnel: prevent perpetual headroom growth\n\nCVE-2024-26803:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: veth: clear GRO when clearing XDP even when down\n\nCVE-2024-26798:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfbcon: always restore the old font data in fbcon_do_set_font()\n\nCVE-2024-26793:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ngtp: fix use-after-free and null-ptr-deref in gtp_newlink()\n\nCVE-2024-26792:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix double free of anonymous device after snapshot creation failure\n\nCVE-2024-26791:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: dev-replace: properly validate device names\n\nCVE-2024-26789:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: arm64/neonbs - fix out-of-bounds access on short input\n\nCVE-2024-26782:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix double-free on socket dismantle\n\nCVE-2024-26780:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix task hung while purging oob_skb in GC.\n\nCVE-2024-26774:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt\n\nCVE-2024-26773:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n\nCVE-2024-26772:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\n\nCVE-2024-26764:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio\n\nCVE-2024-26763:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don\u0027t modify the data when using authenticated encryption\n\nCVE-2024-26760:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: pscsi: Fix bio_put() for error case\n\nCVE-2024-26759:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/swap: fix race when skipping swapcache\n\nCVE-2024-26754:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ngtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()\n\nCVE-2024-26742:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: smartpqi: Fix disable_managed_interrupts\n\nCVE-2024-26741:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\ndccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().\n\nCVE-2024-26737:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel\n\nCVE-2024-26735:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: fix possible use-after-free and null-ptr-deref\n\nCVE-2024-26733:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\narp: Prevent overflow in arp_req_get().\n\nCVE-2024-26731:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()\n\nCVE-2024-26687:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nxen/events: close evtchn after mapping cleanup\n\nCVE-2024-26686:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/proc: do_task_stat: use sig-\u003Estats_lock to gather the threads/children stats\n\nCVE-2024-26659:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nxhci: handle isoc Babble and Buffer Overrun events properly\n\nCVE-2024-26621:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nmm: huge_memory: don\u0027t force huge page alignment on 32 bit\n\nCVE-2024-1627:\n\tA vulnerability was discovered in the Linux kernel\u0027s IPv4 networking stack. Under certain conditions, MPTCP and NetLabel can be configured in a way that triggers a double free memory error in net/ipv4/af_inet.c:inet_sock_destruct(). This may lead to a system crash, denial of service, or potential arbitrary code execution.\n\nCVE-2023-54272:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix a possible null-pointer dereference in ni_clear()\n\nCVE-2023-54196:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix NULL pointer dereference in \u0027ni_write_inode\u0027\n\nCVE-2023-53732:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix NULL dereference in ni_write_inode\n\nCVE-2023-53486:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Enhance the attribute size check\n\nCVE-2023-53194:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Add length check in indx_get_root\n\nCVE-2023-52641:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()\n\nCVE-2023-52640:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix oob in ntfs_listxattr\n\nCVE-2023-52620:\n\tIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: disallow timeout for anonymous sets",
  "published": "2024-12-05T20:34:00Z",
  "severity": "important",
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.82-99.168",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.82-99.168.amzn2023",
      "fix": "ALAS2023-2024-784",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784",
      "released": "2024-12-05T20:34:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}