{ "fix": "ALAS2023-2024-779", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-779", "summary": "ALAS2023-2024-779, released December 5, 2024, fixes 34 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.", "platform": "linux", "type": "advisory", "title": "Security update for 21 packages", "released": "2024-12-05T20:34:00Z", "priority": "High", "priorityTier": 3, "priorityReason": "Closes CVE-2024-44986, high severity", "supported": true, "cveCount": 34, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00886, "maxCvss": 8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2024-779.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-libbpf", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-libbpf-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-libbpf-static", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.109-118.189", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.109-118.189", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.109-118.189.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2024-44986", "url": "https://patchblox.com/security/cve/CVE-2024-44986", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00722, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45016", "url": "https://patchblox.com/security/cve/CVE-2024-45016", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44974", "url": "https://patchblox.com/security/cve/CVE-2024-44974", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting end...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00272, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44983", "url": "https://patchblox.com/security/cve/CVE-2024-44983", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensu...", "priority": "High", "severity": "high", "cvss": 7.6, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46689", "url": "https://patchblox.com/security/cve/CVE-2024-46689", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: c...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44990", "url": "https://patchblox.com/security/cve/CVE-2024-44990", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-41096", "url": "https://patchblox.com/security/cve/CVE-2024-41096", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: e...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0024, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-42314", "url": "https://patchblox.com/security/cve/CVE-2024-42314", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-40972", "url": "https://patchblox.com/security/cve/CVE-2024-40972", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53728", "url": "https://patchblox.com/security/cve/CVE-2023-53728", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "important", "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44947", "url": "https://patchblox.com/security/cve/CVE-2024-44947", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: b...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00886, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44946", "url": "https://patchblox.com/security/cve/CVE-2024-44946", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0086, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46763", "url": "https://patchblox.com/security/cve/CVE-2024-46763", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00708, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46717", "url": "https://patchblox.com/security/cve/CVE-2024-46717", "title": "net/mlx5e: SHAMPO, Fix incorrect page release", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0053, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45009", "url": "https://patchblox.com/security/cve/CVE-2024-45009", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-41098", "url": "https://patchblox.com/security/cve/CVE-2024-41098", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference o...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45021", "url": "https://patchblox.com/security/cve/CVE-2024-45021", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: memcg_write_event_control(): fix a user-triggera...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45006", "url": "https://patchblox.com/security/cve/CVE-2024-45006", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at fu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-43835", "url": "https://patchblox.com/security/cve/CVE-2024-43835", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix napi_skb_cache_put warning Afte...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46679", "url": "https://patchblox.com/security/cve/CVE-2024-46679", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00246, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44991", "url": "https://patchblox.com/security/cve/CVE-2024-44991", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcp_sk_exit...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44989", "url": "https://patchblox.com/security/cve/CVE-2024-44989", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45018", "url": "https://patchblox.com/security/cve/CVE-2024-45018", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45008", "url": "https://patchblox.com/security/cve/CVE-2024-45008", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45000", "url": "https://patchblox.com/security/cve/CVE-2024-45000", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46707", "url": "https://patchblox.com/security/cve/CVE-2024-46707", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICC_*SGI*_EL1 undef in the abse...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46686", "url": "https://patchblox.com/security/cve/CVE-2024-46686", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in sm...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45022", "url": "https://patchblox.com/security/cve/CVE-2024-45022", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-43897", "url": "https://patchblox.com/security/cve/CVE-2024-43897", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: drop bad gso csum_start and offset in virti...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-46711", "url": "https://patchblox.com/security/cve/CVE-2024-46711", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-54145", "url": "https://patchblox.com/security/cve/CVE-2023-54145", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "Important", "cvss": 3.3, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45019", "url": "https://patchblox.com/security/cve/CVE-2024-45019", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout rep...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-45003", "url": "https://patchblox.com/security/cve/CVE-2024-45003", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfs: Don\u0027t evict inode under the inode lru trave...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-47660", "url": "https://patchblox.com/security/cve/CVE-2024-47660", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }