Linux · Amazon Linux · Security advisory · March 20, 2023

ALAS2023-2023-138: Security update for 19 packages

ALAS2023-2023-138, released March 20, 2023, fixes 69 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
69
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0138
72nd percentile

Priority of the 69 CVEs

Patch now 0 Urgent 0 High 28 Routine 41

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.19-30.43.amzn2023
bpftool-debuginfoamzn 20236.1.19-30.43.amzn2023
kernelamzn 20236.1.19-30.43.amzn2023
kernel-debuginfoamzn 20236.1.19-30.43.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.19-30.43.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.19-30.43.amzn2023
kernel-develamzn 20236.1.19-30.43.amzn2023
kernel-headersamzn 20236.1.19-30.43.amzn2023
kernel-libbpfamzn 20236.1.19-30.43.amzn2023
kernel-libbpf-develamzn 20236.1.19-30.43.amzn2023
kernel-libbpf-staticamzn 20236.1.19-30.43.amzn2023
kernel-livepatch-6.1.19-30.43amzn 20231.0-0.amzn2023
kernel-toolsamzn 20236.1.19-30.43.amzn2023
kernel-tools-debuginfoamzn 20236.1.19-30.43.amzn2023
kernel-tools-develamzn 20236.1.19-30.43.amzn2023
perfamzn 20236.1.19-30.43.amzn2023
perf-debuginfoamzn 20236.1.19-30.43.amzn2023
python3-perfamzn 20236.1.19-30.43.amzn2023
python3-perf-debuginfoamzn 20236.1.19-30.43.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-1998 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...7.8 0.0138 None reported
High CVE-2023-1829 linux: A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve...8.1 0.0106 None reported
High CVE-2023-54306 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.5 0.0060 None reported
High CVE-2023-53820 linux: In the Linux kernel, the following vulnerability has been resolved: loop: loop_set_status_from_info() check before a...n/a 0.0030 None reported
High CVE-2023-45863 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...8.0 0.0029 None reported
High CVE-2023-1077 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.0 0.0028 None reported
High CVE-2023-1118 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...7.8 0.0028 None reported
High CVE-2023-53840 linux: In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bou...n/a 0.0026 None reported
High CVE-2023-54057 kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...8.0 0.0024 None reported
High CVE-2023-53783 linux: In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fix divide by 0 error in calc_lcoefs...n/a 0.0022 None reported
High CVE-2023-54305 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: refuse to create ea block when umounted T...n/a 0.0021 None reported
High CVE-2023-54190 linux: In the Linux kernel, the following vulnerability has been resolved: leds: led-core: Fix refcount leak in of_led_get(...n/a 0.0020 None reported
High CVE-2023-54046 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly As it is...7.8 0.0020 None reported
High CVE-2023-53216 linux: In the Linux kernel, the following vulnerability has been resolved: arm64: efi: Make efi_rt_lock a raw_spinlock Run...7.8 0.0017 None reported
High CVE-2023-53506 linux: In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents Wh...7.8 0.0017 None reported
High CVE-2023-53202 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0017 None reported
High CVE-2023-53373 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: A...7.8 0.0017 None reported
High CVE-2023-53307 linux: In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in do_rbd_add() when r...7.8 0.0016 None reported
High CVE-2023-53494 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...7.8 0.0016 None reported
High CVE-2023-53695 linux: In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory...7.8 0.0016 None reported
High CVE-2023-53790 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf m...7.8 0.0016 None reported
High CVE-2023-54107 linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pd_fr...7.8 0.0016 None reported
High CVE-2023-54198 linux: In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in tty_driver_look...7.8 0.0016 None reported
High CVE-2023-54317 perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.8 0.0016 None reported
High CVE-2023-53254 cacheinfo: Fix shared_cpu_map to handle shared caches at different levels7.1 0.0015 None reported
Showing 1 to 25 of 69 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.