Amazon Linux 2 Security Advisory: ALAS2KERNEL-5.15-2023-025
Advisory Released Date: 2023-08-07
Advisory Updated Date: 2025-10-18
FAQs regarding Amazon Linux ALAS/CVE Severity
An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c. (CVE-2022-48502)
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled?address, potentially leading to information disclosure. (CVE-2023-20569)
An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. (CVE-2023-20593)
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. (CVE-2023-3611)
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. (CVE-2023-3776)
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol. (CVE-2023-39197)
An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32. (CVE-2023-44466)
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload. (CVE-2023-51043)
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (CVE-2023-52885)
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix null pointer dereference in tracing_err_log_open() (CVE-2023-53167)
In the Linux kernel, the following vulnerability has been resolved:
ipv6/addrconf: fix a potential refcount underflow for idev (CVE-2023-53189)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile (CVE-2023-53243)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix wrong setting of max_corr_read_errors (CVE-2023-53313)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (CVE-2023-53333)
In the Linux kernel, the following vulnerability has been resolved:
icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (CVE-2023-53343)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (CVE-2023-53357)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (CVE-2023-53380)
In the Linux kernel, the following vulnerability has been resolved:
shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (CVE-2023-53391)
In the Linux kernel, the following vulnerability has been resolved:
ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() (CVE-2023-53420)
In the Linux kernel, the following vulnerability has been resolved:
bpf: cpumap: Fix memory leak in cpu_map_update_elem (CVE-2023-53441)
In the Linux kernel, the following vulnerability has been resolved:
PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (CVE-2023-53446)
In the Linux kernel, the following vulnerability has been resolved:
io_uring: wait interruptibly for request completions on exit (CVE-2023-53461)
In the Linux kernel, the following vulnerability has been resolved:
tracing/histograms: Add histograms to hist_vars if they have referenced variables (CVE-2023-53560)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Check for NOT_READY flag state after locking (CVE-2023-53581)
In the Linux kernel, the following vulnerability has been resolved:
bonding: do not assume skb mac_header is set (CVE-2023-53601)
In the Linux kernel, the following vulnerability has been resolved:
dax: Fix dax_mapping_release() use after free (CVE-2023-53613)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (CVE-2023-53619)
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Fix deadloop issue on reading trace_pipe (CVE-2023-53668)
In the Linux kernel, the following vulnerability has been resolved:
clk: Fix memory leak in devm_clk_notifier_register() (CVE-2023-53674)
In the Linux kernel, the following vulnerability has been resolved:
bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (CVE-2023-53681)
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system. (CVE-2024-0639)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel or yum update --advisory ALAS2KERNEL-5.15-2023-025 to update your system.
aarch64:
kernel-5.15.122-77.145.amzn2.aarch64
kernel-headers-5.15.122-77.145.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.15.122-77.145.amzn2.aarch64
perf-5.15.122-77.145.amzn2.aarch64
perf-debuginfo-5.15.122-77.145.amzn2.aarch64
python-perf-5.15.122-77.145.amzn2.aarch64
python-perf-debuginfo-5.15.122-77.145.amzn2.aarch64
kernel-tools-5.15.122-77.145.amzn2.aarch64
kernel-tools-devel-5.15.122-77.145.amzn2.aarch64
kernel-tools-debuginfo-5.15.122-77.145.amzn2.aarch64
bpftool-5.15.122-77.145.amzn2.aarch64
bpftool-debuginfo-5.15.122-77.145.amzn2.aarch64
kernel-devel-5.15.122-77.145.amzn2.aarch64
kernel-debuginfo-5.15.122-77.145.amzn2.aarch64
kernel-livepatch-5.15.122-77.145-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.15.122-77.145.amzn2.i686
src:
kernel-5.15.122-77.145.amzn2.src
x86_64:
kernel-5.15.122-77.145.amzn2.x86_64
kernel-headers-5.15.122-77.145.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.15.122-77.145.amzn2.x86_64
perf-5.15.122-77.145.amzn2.x86_64
perf-debuginfo-5.15.122-77.145.amzn2.x86_64
python-perf-5.15.122-77.145.amzn2.x86_64
python-perf-debuginfo-5.15.122-77.145.amzn2.x86_64
kernel-tools-5.15.122-77.145.amzn2.x86_64
kernel-tools-devel-5.15.122-77.145.amzn2.x86_64
kernel-tools-debuginfo-5.15.122-77.145.amzn2.x86_64
bpftool-5.15.122-77.145.amzn2.x86_64
bpftool-debuginfo-5.15.122-77.145.amzn2.x86_64
kernel-devel-5.15.122-77.145.amzn2.x86_64
kernel-debuginfo-5.15.122-77.145.amzn2.x86_64
kernel-livepatch-5.15.122-77.145-1.0-0.amzn2.x86_64
2025-10-18: CVE-2023-53674 was added to this advisory.
2025-10-18: CVE-2023-53681 was added to this advisory.
2025-10-18: CVE-2023-53601 was added to this advisory.
2025-10-18: CVE-2023-53613 was added to this advisory.
2025-10-18: CVE-2023-53560 was added to this advisory.
2025-10-18: CVE-2023-53668 was added to this advisory.
2025-10-18: CVE-2023-53581 was added to this advisory.
2025-10-18: CVE-2023-53461 was added to this advisory.
2025-10-18: CVE-2023-53619 was added to this advisory.
2025-10-02: CVE-2023-53420 was added to this advisory.
2025-10-02: CVE-2023-53167 was added to this advisory.
2025-10-02: CVE-2023-53446 was added to this advisory.
2025-10-02: CVE-2023-53313 was added to this advisory.
2025-10-02: CVE-2023-53380 was added to this advisory.
2025-10-02: CVE-2023-53243 was added to this advisory.
2025-10-02: CVE-2023-53441 was added to this advisory.
2025-10-02: CVE-2023-53391 was added to this advisory.
2025-10-02: CVE-2023-53333 was added to this advisory.
2025-09-22: CVE-2023-53343 was added to this advisory.
2025-09-22: CVE-2023-53357 was added to this advisory.
2025-09-22: CVE-2023-53189 was added to this advisory.
2025-03-03: CVE-2023-52885 was added to this advisory.
2024-07-03: CVE-2023-39197 was added to this advisory.
2024-07-03: CVE-2023-51043 was added to this advisory.
2024-02-01: CVE-2024-0639 was added to this advisory.
2023-10-12: CVE-2023-44466 was added to this advisory.
2023-08-31: CVE-2023-20569 was added to this advisory.