Linux · Security advisory · December 5, 2024

ALAS2023-2024-784: Security update for 21 packages

ALAS2023-2024-784, released December 5, 2024, fixes 58 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
58
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0101
63rd percentile

Priority of the 58 CVEs

Patch now 0 Urgent 0 High 24 Routine 34

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.82-99.168.amzn2023
bpftool-debuginfoamzn 20236.1.82-99.168.amzn2023
kernelamzn 20236.1.82-99.168.amzn2023
kernel-debuginfoamzn 20236.1.82-99.168.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.82-99.168.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.82-99.168.amzn2023
kernel-develamzn 20236.1.82-99.168.amzn2023
kernel-headersamzn 20236.1.82-99.168.amzn2023
kernel-libbpfamzn 20236.1.82-99.168.amzn2023
kernel-libbpf-develamzn 20236.1.82-99.168.amzn2023
kernel-libbpf-staticamzn 20236.1.82-99.168.amzn2023
kernel-livepatch-6.1.82-99.168amzn 20231.0-0.amzn2023
kernel-modules-extraamzn 20236.1.82-99.168.amzn2023
kernel-modules-extra-commonamzn 20236.1.82-99.168.amzn2023
kernel-toolsamzn 20236.1.82-99.168.amzn2023
kernel-tools-debuginfoamzn 20236.1.82-99.168.amzn2023
kernel-tools-develamzn 20236.1.82-99.168.amzn2023
perfamzn 20236.1.82-99.168.amzn2023
perf-debuginfoamzn 20236.1.82-99.168.amzn2023
python3-perfamzn 20236.1.82-99.168.amzn2023
python3-perf-debuginfoamzn 20236.1.82-99.168.amzn2023

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-26782 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0072 None reported
High CVE-2024-26857 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.3 0.0061 None reported
High CVE-2024-27024 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0031 None reported
High CVE-2024-26793 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0029 None reported
High CVE-2024-26763 linux: In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authe... 7.1 0.0029 None reported
High CVE-2024-26735 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0027 None reported
High CVE-2024-26852 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0027 None reported
High CVE-2024-26772 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2023-52620 kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0027 None reported
High CVE-2024-26759 mm/swap: fix race when skipping swapcache 7.0 0.0026 None reported
High CVE-2024-26754 linux: In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gt... 7.8 0.0025 None reported
High CVE-2024-26737 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0025 None reported
High CVE-2024-26804 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0025 None reported
High CVE-2024-26791 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0025 None reported
High CVE-2023-52640 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0025 None reported
High CVE-2024-26742 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0025 None reported
High CVE-2024-26792 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after... 7.8 0.0024 None reported
High CVE-2024-26789 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/neonbs - fix out-of-bounds access... 7.8 0.0024 None reported
High CVE-2023-54272 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a possible null-pointer dereferenc... n/a 0.0021 None reported
High CVE-2023-53732 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode... n/a 0.0020 None reported
High CVE-2023-54196 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL pointer dereference in 'ni_wr... n/a 0.0020 None reported
High CVE-2023-53486 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance the attribute size check This... 7.1 0.0017 None reported
High CVE-2023-53194 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add length check in indx_get_root Thi... 7.8 0.0017 None reported
High CVE-2024-1627 kernel-libbpf-static: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-58239: In the L... n/a n/a None reported
Routine CVE-2024-26621 linux: In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: don't force huge page alignment... 5.5 0.0101 None reported
Showing 1 to 25 of 58 1Next