Amazon Linux 2 Security Advisory: ALAS2KERNEL-5.10-2023-034
Advisory Released Date: 2023-06-28
Advisory Updated Date: 2025-10-18
FAQs regarding Amazon Linux ALAS/CVE Severity
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition. (CVE-2022-4269)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (CVE-2022-50067)
There is a potential deadlock in the eBPF subsystem in the Linux kernel.
The default sysctl configuration "kernel.unprivileged_bpf_disabled" on Amazon Linux does not allow unprivileged users to use eBPF. (CVE-2023-0160)
A flaw was found in the Linux kernel's networking subsystem within the RPL protocol's handling. This issue results from the improper handling of user-supplied data, which can lead to an assertion failure. This flaw allows an unauthenticated, remote attacker to create a denial of service condition on the system. (CVE-2023-2156)
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e. (CVE-2023-3090)
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag(). (CVE-2023-3111)
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak. (CVE-2023-3141)
A flaw in the Linux Kernel found in the GFS2 file system. On corrupted gfs2 file systems the evict code can try to reference the journal descriptor structure, jdesc, after it has been freed and set to NULL. It can lead to null pointer dereference when gfs2_trans_begin being called and then fail ingfs2_evict_inode(). (CVE-2023-3212)
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information. (CVE-2023-3268)
An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. (CVE-2023-34256)
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. In this flaw an attacker with local user access may lead to a system crash or a leak of internal kernel information. (CVE-2023-3567)
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation. (CVE-2023-35788)
In the Linux kernel, the following vulnerability has been resolved:
serial: 8250: Reinit port->pm on port specific driver unbind (CVE-2023-53176)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Avoid undefined behavior: applying zero offset to null pointer (CVE-2023-53182)
In the Linux kernel, the following vulnerability has been resolved:
ext4: add bounds checking in get_max_inline_xattr_value_size() (CVE-2023-53285)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix leak of 'r10bio->remaining' for recovery (CVE-2023-53299)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix WARNING in mb_find_extent (CVE-2023-53317)
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: do not write dirty data after degenerating to read-only (CVE-2023-53337)
In the Linux kernel, the following vulnerability has been resolved:
rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access (CVE-2023-53419)
In the Linux kernel, the following vulnerability has been resolved:
net: add vlan_get_protocol_and_depth() helper (CVE-2023-53433)
In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa() (CVE-2023-53450)
In the Linux kernel, the following vulnerability has been resolved:
x86/MCE/AMD: Use an u64 for bank_map (CVE-2023-53474)
In the Linux kernel, the following vulnerability has been resolved:
lib: cpu_rmap: Avoid use after free on rmap->obj array entries (CVE-2023-53484)
In the Linux kernel, the following vulnerability has been resolved:
tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (CVE-2023-53489)
In the Linux kernel, the following vulnerability has been resolved:
ext4: allow ext4_get_group_info() to fail (CVE-2023-53503)
In the Linux kernel, the following vulnerability has been resolved:
tipc: do not update mtu if msg_max is too small in mtu negotiation (CVE-2023-53517)
In the Linux kernel, the following vulnerability has been resolved:
blk-crypto: make blk_crypto_evict_key() more robust (CVE-2023-53536)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: fix null deref on element insertion (CVE-2023-53566)
In the Linux kernel, the following vulnerability has been resolved:
spi: qup: Don't skip cleanup in remove's error path (CVE-2023-53567)
In the Linux kernel, the following vulnerability has been resolved:
ext2: Check block size validity during mount (CVE-2023-53569)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: Always check queue mode setting from configfs (CVE-2023-53576)
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: Fix multiple LUN_RESET handling (CVE-2023-53586)
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Sync IRQ works before buffer destruction (CVE-2023-53587)
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (CVE-2023-53604)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_fq: fix integer overflow of "credit" (CVE-2023-53624)
In the Linux kernel, the following vulnerability has been resolved:
rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed (CVE-2023-53655)
In the Linux kernel, the following vulnerability has been resolved:
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (CVE-2023-53683)
A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free. (CVE-2024-0775)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel or yum update --advisory ALAS2KERNEL-5.10-2023-034 to update your system.
aarch64:
kernel-5.10.184-174.730.amzn2.aarch64
kernel-headers-5.10.184-174.730.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.10.184-174.730.amzn2.aarch64
perf-5.10.184-174.730.amzn2.aarch64
perf-debuginfo-5.10.184-174.730.amzn2.aarch64
python-perf-5.10.184-174.730.amzn2.aarch64
python-perf-debuginfo-5.10.184-174.730.amzn2.aarch64
kernel-tools-5.10.184-174.730.amzn2.aarch64
kernel-tools-devel-5.10.184-174.730.amzn2.aarch64
kernel-tools-debuginfo-5.10.184-174.730.amzn2.aarch64
bpftool-5.10.184-174.730.amzn2.aarch64
bpftool-debuginfo-5.10.184-174.730.amzn2.aarch64
kernel-devel-5.10.184-174.730.amzn2.aarch64
kernel-debuginfo-5.10.184-174.730.amzn2.aarch64
kernel-livepatch-5.10.184-174.730-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.10.184-174.730.amzn2.i686
src:
kernel-5.10.184-174.730.amzn2.src
x86_64:
kernel-5.10.184-174.730.amzn2.x86_64
kernel-headers-5.10.184-174.730.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.10.184-174.730.amzn2.x86_64
perf-5.10.184-174.730.amzn2.x86_64
perf-debuginfo-5.10.184-174.730.amzn2.x86_64
python-perf-5.10.184-174.730.amzn2.x86_64
python-perf-debuginfo-5.10.184-174.730.amzn2.x86_64
kernel-tools-5.10.184-174.730.amzn2.x86_64
kernel-tools-devel-5.10.184-174.730.amzn2.x86_64
kernel-tools-debuginfo-5.10.184-174.730.amzn2.x86_64
bpftool-5.10.184-174.730.amzn2.x86_64
bpftool-debuginfo-5.10.184-174.730.amzn2.x86_64
kernel-devel-5.10.184-174.730.amzn2.x86_64
kernel-debuginfo-5.10.184-174.730.amzn2.x86_64
kernel-livepatch-5.10.184-174.730-1.0-0.amzn2.x86_64
2025-10-18: CVE-2023-53655 was added to this advisory.
2025-10-18: CVE-2023-53683 was added to this advisory.
2025-10-18: CVE-2023-53604 was added to this advisory.
2025-10-18: CVE-2023-53624 was added to this advisory.
2025-10-18: CVE-2023-53586 was added to this advisory.
2025-10-18: CVE-2023-53587 was added to this advisory.
2025-10-18: CVE-2023-53489 was added to this advisory.
2025-10-18: CVE-2023-53536 was added to this advisory.
2025-10-18: CVE-2023-53566 was added to this advisory.
2025-10-18: CVE-2023-53576 was added to this advisory.
2025-10-18: CVE-2023-53567 was added to this advisory.
2025-10-18: CVE-2023-53569 was added to this advisory.
2025-10-18: CVE-2023-53517 was added to this advisory.
2025-10-08: CVE-2023-53484 was added to this advisory.
2025-10-08: CVE-2023-53474 was added to this advisory.
2025-10-08: CVE-2023-53450 was added to this advisory.
2025-10-08: CVE-2023-53503 was added to this advisory.
2025-10-02: CVE-2023-53182 was added to this advisory.
2025-10-02: CVE-2023-53419 was added to this advisory.
2025-10-02: CVE-2023-53176 was added to this advisory.
2025-10-02: CVE-2023-53433 was added to this advisory.
2025-10-02: CVE-2023-53337 was added to this advisory.
2025-09-22: CVE-2023-53299 was added to this advisory.
2025-09-22: CVE-2023-53285 was added to this advisory.
2025-09-22: CVE-2023-53317 was added to this advisory.
2025-07-29: CVE-2022-50067 was added to this advisory.
2024-07-03: CVE-2023-0160 was added to this advisory.
2024-02-01: CVE-2023-3141 was added to this advisory.
2024-02-01: CVE-2024-0775 was added to this advisory.
2023-10-12: CVE-2023-3111 was added to this advisory.
2023-10-12: CVE-2023-3212 was added to this advisory.
2023-09-27: CVE-2023-3567 was added to this advisory.