Linux · 
Amazon Linux · Security advisory · March 30, 2023
Amazon Linux · Security advisory · March 30, 2023ALAS2023-2023-148: Security update for 19 packages
ALAS2023-2023-148, released March 30, 2023, fixes 31 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
31
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0047
40th percentile
Priority of the 31 CVEs
Patch now 0
Urgent 0
High 16
Routine 15
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 6.1.21-1.45.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-debuginfo | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-devel | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-headers | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-libbpf | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-libbpf-devel | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-libbpf-static | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-livepatch-6.1.21-1.45 | amzn 2023 | 1.0-0.amzn2023 |
| kernel-tools | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 6.1.21-1.45.amzn2023 |
| kernel-tools-devel | amzn 2023 | 6.1.21-1.45.amzn2023 |
| perf | amzn 2023 | 6.1.21-1.45.amzn2023 |
| perf-debuginfo | amzn 2023 | 6.1.21-1.45.amzn2023 |
| python3-perf | amzn 2023 | 6.1.21-1.45.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 6.1.21-1.45.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2023-28466 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0027 | None reported |
| High | CVE-2023-2235 | linux: A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privil... | 8.1 | 0.0025 | None reported |
| High | CVE-2023-53081 | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write W... | 7.8 | 0.0021 | None reported |
| High | CVE-2023-53084 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0021 | None reported |
| High | CVE-2023-53111 | linux: In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_fileback... | 7.8 | 0.0021 | None reported |
| High | CVE-2023-53117 | kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0021 | None reported |
| High | CVE-2023-53075 | linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec... | 7.8 | 0.0021 | None reported |
| High | CVE-2023-53089 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0020 | None reported |
| High | CVE-2023-53107 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0020 | None reported |
| High | CVE-2023-53112 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0020 | None reported |
| High | CVE-2023-53103 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0020 | None reported |
| High | CVE-2023-53070 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0020 | None reported |
| High | CVE-2023-53136 | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: fix struct pid leaks in OOB support sy... | 7.1 | 0.0019 | None reported |
| High | CVE-2023-53123 | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources w... | 7.8 | 0.0019 | None reported |
| High | CVE-2023-53140 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0019 | None reported |
| High | CVE-2023-53137 | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a dire... | n/a | n/a | None reported |
| Routine | CVE-2023-30456 | linux: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8 | 6.5 | 0.0047 | None reported |
| Routine | CVE-2023-53087 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0022 | None reported |
| Routine | CVE-2023-53091 | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after... | 5.5 | 0.0022 | None reported |
| Routine | CVE-2022-49932 | KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace | 5.5 | 0.0021 | None reported |
| Routine | CVE-2023-53100 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0021 | None reported |
| Routine | CVE-2023-53101 | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: zero i_disksize when initializing the boot... | 5.5 | 0.0020 | None reported |
| Routine | CVE-2023-53096 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0020 | None reported |
| Routine | CVE-2023-53109 | linux: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev-... | 5.5 | 0.0020 | None reported |
| Routine | CVE-2023-53095 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0020 | None reported |
Showing 1 to 25 of 31
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.