{
  "fix": "ALAS2023-2023-132",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
  "summary": "ALAS2023-2023-132, released March 11, 2023, fixes 30 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 19 packages",
  "released": "2023-03-11T01:10:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2023-52741, high severity",
  "supported": true,
  "cveCount": 30,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00731,
  "maxCvss": 8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2023-132.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.12-17.42",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.12-17.42",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-52741",
      "url": "https://patchblox.com/security/cve/CVE-2023-52741",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix use-after-free in rdata-\u003Eread_into_pag...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00731,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3567",
      "url": "https://patchblox.com/security/cve/CVE-2023-3567",
      "title": "linux: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 8,
      "epss": 0.00419,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52973",
      "url": "https://patchblox.com/security/cve/CVE-2023-52973",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\nFor more de...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52983",
      "url": "https://patchblox.com/security/cve/CVE-2023-52983",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  block, bfq: fix uaf for bfqq in bic_set_bfqq()...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52930",
      "url": "https://patchblox.com/security/cve/CVE-2023-52930",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/i915: Fix potential bit_17 double-free  A us...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52933",
      "url": "https://patchblox.com/security/cve/CVE-2023-52933",
      "title": "kernel-64k-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: S...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-1078",
      "url": "https://patchblox.com/security/cve/CVE-2023-1078",
      "title": "linux: A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52931",
      "url": "https://patchblox.com/security/cve/CVE-2023-52931",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52935",
      "url": "https://patchblox.com/security/cve/CVE-2023-52935",
      "title": "kernel-64k-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-49743",
      "url": "https://patchblox.com/security/cve/CVE-2022-49743",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ovl: Use \u0022buf\u0022 flexible array for memcpy() desti...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00452,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27672",
      "url": "https://patchblox.com/security/cve/CVE-2022-27672",
      "title": "linux: When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling th...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52976",
      "url": "https://patchblox.com/security/cve/CVE-2023-52976",
      "title": "kernel-64k-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: G...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00281,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52986",
      "url": "https://patchblox.com/security/cve/CVE-2023-52986",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00281,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52977",
      "url": "https://patchblox.com/security/cve/CVE-2023-52977",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52739",
      "url": "https://patchblox.com/security/cve/CVE-2023-52739",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Fix page corruption caused by racy check in __fr...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52928",
      "url": "https://patchblox.com/security/cve/CVE-2023-52928",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52936",
      "url": "https://patchblox.com/security/cve/CVE-2023-52936",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  kernel/irq/irqdomain.c: fix memory leak with usi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52746",
      "url": "https://patchblox.com/security/cve/CVE-2023-52746",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm/compat: prevent potential spectre v1 gadget...",
      "priority": "Routine",
      "severity": "low",
      "cvss": 2.5,
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52981",
      "url": "https://patchblox.com/security/cve/CVE-2023-52981",
      "title": "drm/i915: Fix request ref counting during error capture \u0026 debugfs dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52942",
      "url": "https://patchblox.com/security/cve/CVE-2023-52942",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cgroup/cpuset: Fix wrong check in update_parent_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52982",
      "url": "https://patchblox.com/security/cve/CVE-2023-52982",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fscache: Use wait_on_bit() to wait for the freei...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52939",
      "url": "https://patchblox.com/security/cve/CVE-2023-52939",
      "title": "mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52937",
      "url": "https://patchblox.com/security/cve/CVE-2023-52937",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52940",
      "url": "https://patchblox.com/security/cve/CVE-2023-52940",
      "title": "kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: G...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3359",
      "url": "https://patchblox.com/security/cve/CVE-2023-3359",
      "title": "linux: An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3161",
      "url": "https://patchblox.com/security/cve/CVE-2023-3161",
      "title": "linux: A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52932",
      "url": "https://patchblox.com/security/cve/CVE-2023-52932",
      "title": "kernel-64k-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: b...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-49744",
      "url": "https://patchblox.com/security/cve/CVE-2022-49744",
      "title": "kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: G...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52934",
      "url": "https://patchblox.com/security/cve/CVE-2023-52934",
      "title": "kernel-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: G...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52979",
      "url": "https://patchblox.com/security/cve/CVE-2023-52979",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  squashfs: harden sanity check in squashfs_read_x...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T01:44:33Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}