Linux · Amazon Linux · Security advisory · June 21, 2023

ALAS2023-2023-228: Security update for 19 packages

ALAS2023-2023-228, released June 21, 2023, fixes 44 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
44
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0618
93rd percentile

Priority of the 44 CVEs

Patch now 0 Urgent 2 High 24 Routine 18

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.34-56.100.amzn2023
bpftool-debuginfoamzn 20236.1.34-56.100.amzn2023
kernelamzn 20236.1.34-56.100.amzn2023
kernel-debuginfoamzn 20236.1.34-56.100.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.34-56.100.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.34-56.100.amzn2023
kernel-develamzn 20236.1.34-56.100.amzn2023
kernel-headersamzn 20236.1.34-56.100.amzn2023
kernel-libbpfamzn 20236.1.34-56.100.amzn2023
kernel-libbpf-develamzn 20236.1.34-56.100.amzn2023
kernel-libbpf-staticamzn 20236.1.34-56.100.amzn2023
kernel-livepatch-6.1.34-56.100amzn 20231.0-0.amzn2023
kernel-toolsamzn 20236.1.34-56.100.amzn2023
kernel-tools-debuginfoamzn 20236.1.34-56.100.amzn2023
kernel-tools-develamzn 20236.1.34-56.100.amzn2023
perfamzn 20236.1.34-56.100.amzn2023
perf-debuginfoamzn 20236.1.34-56.100.amzn2023
python3-perfamzn 20236.1.34-56.100.amzn2023
python3-perf-debuginfoamzn 20236.1.34-56.100.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2023-54184 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session f...9.8 0.0057 None reported
Urgent CVE-2023-54269 linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use...9.8 0.0055 None reported
High CVE-2023-2156 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.5 0.0618 None reported
High CVE-2023-54004 linux: In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_me...8.0 0.0059 None reported
High CVE-2023-53705 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv(...8.2 0.0056 None reported
High CVE-2023-35788 linux: An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.77.8 0.0052 None reported
High CVE-2023-3090 kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...7.8 0.0048 None reported
High CVE-2023-3567 linux: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel8.0 0.0042 None reported
High CVE-2023-53853 linux: In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk->cb_running B...n/a 0.0026 None reported
High CVE-2023-54244 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0021 None reported
High CVE-2023-54218 linux: In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk->sk_stamp in sock_re...n/a 0.0021 None reported
High CVE-2023-54086 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add preempt_count_{sub,add} into btf id den...n/a 0.0021 None reported
High CVE-2023-54226 linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races around sk->sk_shutdownn/a 0.0021 None reported
High CVE-2023-54012 linux: In the Linux kernel, the following vulnerability has been resolved: net: fix stack overflow when LRO is disabled for...7.8 0.0017 None reported
High CVE-2022-50240 linux: In the Linux kernel, the following vulnerability has been resolved: android: binder: stop saving a pointer to the VM...7.8 0.0017 None reported
High CVE-2023-53484 linux: In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj...7.8 0.0016 None reported
High CVE-2023-54116 linux: In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bou...7.8 0.0016 None reported
High CVE-2023-53182 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0016 None reported
High CVE-2023-53483 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0016 None reported
High CVE-2023-54157 linux: In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc->vma in race with munma...7.8 0.0015 None reported
High CVE-2023-54200 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always release netdev hook...7.8 0.0015 None reported
High CVE-2023-53747 linux: In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload load of struct vc_data pointer...7.8 0.0015 None reported
High CVE-2023-53513 kernel-rt-debug: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...7.6 0.0015 None reported
High CVE-2023-53576 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...8.0 0.0015 None reported
High CVE-2023-53178 mm: fix zswap writeback race condition7.3 0.0012 None reported
Showing 1 to 25 of 44 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.