Linux · Amazon Linux · Security advisory · February 15, 2024

ALAS2023-2024-519: Security update for 21 packages

ALAS2023-2024-519, released February 15, 2024, fixes 24 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
24
None rated Critical
Exploited
0
None reported
Highest CVSS
8.0
Base score, 0 to 10
Highest EPSS
0.0118
67th percentile

Priority of the 24 CVEs

Patch now 0 Urgent 0 High 10 Routine 14

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.75-99.163.amzn2023
bpftool-debuginfoamzn 20236.1.75-99.163.amzn2023
kernelamzn 20236.1.75-99.163.amzn2023
kernel-debuginfoamzn 20236.1.75-99.163.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.75-99.163.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.75-99.163.amzn2023
kernel-develamzn 20236.1.75-99.163.amzn2023
kernel-headersamzn 20236.1.75-99.163.amzn2023
kernel-libbpfamzn 20236.1.75-99.163.amzn2023
kernel-libbpf-develamzn 20236.1.75-99.163.amzn2023
kernel-libbpf-staticamzn 20236.1.75-99.163.amzn2023
kernel-livepatch-6.1.75-99.163amzn 20231.0-0.amzn2023
kernel-modules-extraamzn 20236.1.75-99.163.amzn2023
kernel-modules-extra-commonamzn 20236.1.75-99.163.amzn2023
kernel-toolsamzn 20236.1.75-99.163.amzn2023
kernel-tools-debuginfoamzn 20236.1.75-99.163.amzn2023
kernel-tools-develamzn 20236.1.75-99.163.amzn2023
perfamzn 20236.1.75-99.163.amzn2023
perf-debuginfoamzn 20236.1.75-99.163.amzn2023
python3-perfamzn 20236.1.75-99.163.amzn2023
python3-perf-debuginfoamzn 20236.1.75-99.163.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-46838 linux: Transmit requests in Xen's virtual network protocol can consist of multiple parts7.5 0.0118 None reported
High CVE-2023-52439 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: M...7.8 0.0030 None reported
High CVE-2024-1085 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G...7.8 0.0028 None reported
High CVE-2023-52675 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0028 None reported
High CVE-2023-6915 linux: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel8.0 0.0028 None reported
High CVE-2023-52612 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow Th...7.8 0.0027 None reported
High CVE-2023-52683 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0025 None reported
High CVE-2023-52679 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0025 None reported
High CVE-2024-26589 kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...7.8 0.0024 None reported
High CVE-2024-26598 linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI...7.8 0.0024 None reported
Routine CVE-2023-52610 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...6.4 0.0064 None reported
Routine CVE-2024-26633 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0033 None reported
Routine CVE-2023-52467 linux: In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_...5.5 0.0028 None reported
Routine CVE-2023-52447 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary...6.7 0.0025 None reported
Routine CVE-2023-52693 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0025 None reported
Routine CVE-2023-52463 kernel-azure: The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securi...5.5 0.0024 None reported
Routine CVE-2024-26632 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0024 None reported
Routine CVE-2023-52458 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0023 None reported
Routine CVE-2024-26591 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...5.5 0.0023 None reported
Routine CVE-2023-52462 kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...5.5 0.0023 None reported
Routine CVE-2023-52698 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0022 None reported
Routine CVE-2024-35839 netfilter: bridge: replace physindev with physinif in nf_bridge_info5.5 0.0022 None reported
Routine CVE-2024-35840 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0022 None reported
Routine CVE-2024-26631 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...4.7 0.0019 None reported
Showing 1 to 24 of 24 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.