Linux · Amazon Linux · Security advisory · April 27, 2023

ALAS2023-2023-169: Security update for 19 packages

ALAS2023-2023-169, released April 27, 2023, fixes 22 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
22
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0049
42nd percentile

Priority of the 22 CVEs

Patch now 0 Urgent 0 High 11 Routine 11

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.25-37.47.amzn2023
bpftool-debuginfoamzn 20236.1.25-37.47.amzn2023
kernelamzn 20236.1.25-37.47.amzn2023
kernel-debuginfoamzn 20236.1.25-37.47.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.25-37.47.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.25-37.47.amzn2023
kernel-develamzn 20236.1.25-37.47.amzn2023
kernel-headersamzn 20236.1.25-37.47.amzn2023
kernel-libbpfamzn 20236.1.25-37.47.amzn2023
kernel-libbpf-develamzn 20236.1.25-37.47.amzn2023
kernel-libbpf-staticamzn 20236.1.25-37.47.amzn2023
kernel-livepatch-6.1.25-37.47amzn 20231.0-0.amzn2023
kernel-toolsamzn 20236.1.25-37.47.amzn2023
kernel-tools-debuginfoamzn 20236.1.25-37.47.amzn2023
kernel-tools-develamzn 20236.1.25-37.47.amzn2023
perfamzn 20236.1.25-37.47.amzn2023
perf-debuginfoamzn 20236.1.25-37.47.amzn2023
python3-perfamzn 20236.1.25-37.47.amzn2023
python3-perf-debuginfoamzn 20236.1.25-37.47.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-2124 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...8.1 0.0049 None reported
High CVE-2023-53372 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.8 0.0039 None reported
High CVE-2023-53680 linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC() with ops->opnum ==...7.8 0.0031 None reported
High CVE-2023-53824 linux: In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk->max_...7.8 0.0021 None reported
High CVE-2023-54003 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0021 None reported
High CVE-2023-53987 linux: In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmpn/a 0.0020 None reported
High CVE-2023-54128 linux: In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock Wh...7.8 0.0017 None reported
High CVE-2023-53522 linux: In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before fre...7.8 0.0015 None reported
High CVE-2023-54202 linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915_perf_ad...7.8 0.0015 None reported
High CVE-2023-53525 kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0015 None reported
High CVE-2023-53623 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0014 None reported
Routine CVE-2023-53186 linux: In the Linux kernel, the following vulnerability has been resolved: skbuff: Fix a race between coalescing and releas...4.7 0.0027 None reported
Routine CVE-2023-53634 kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...5.5 0.0022 None reported
Routine CVE-2023-54265 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...5.5 0.0021 None reported
Routine CVE-2023-54176 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...5.8 0.0020 None reported
Routine CVE-2023-54041 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...5.5 0.0019 None reported
Routine CVE-2023-53375 linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Free error logs of tracing instances W...5.5 0.0016 None reported
Routine CVE-2023-53241 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...5.5 0.0016 None reported
Routine CVE-2023-53273 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...5.5 0.0016 None reported
Routine CVE-2023-53198 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...5.5 0.0016 None reported
Routine CVE-2023-53296 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...5.5 0.0015 None reported
Routine CVE-2023-53188 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...4.7 0.0011 None reported
Showing 1 to 22 of 22 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.