Amazon Linux 2023 Security Advisory: ALAS2023-2023-299
Advisory Released Date: 2023-08-25
Advisory Updated Date: 2025-10-18
FAQs regarding Amazon Linux ALAS/CVE Severity
An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c. (CVE-2022-48502)
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. (CVE-2023-3611)
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. (CVE-2023-3776)
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol. (CVE-2023-39197)
An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32. (CVE-2023-44466)
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload. (CVE-2023-51043)
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (CVE-2023-52885)
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix null pointer dereference in tracing_err_log_open() (CVE-2023-53167)
In the Linux kernel, the following vulnerability has been resolved:
ipv6/addrconf: fix a potential refcount underflow for idev (CVE-2023-53189)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix memleak due to fentry attach failure (CVE-2023-53221)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile (CVE-2023-53243)
In the Linux kernel, the following vulnerability has been resolved:
net: fix net_dev_start_xmit trace event vs skb_transport_offset() (CVE-2023-53312)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix wrong setting of max_corr_read_errors (CVE-2023-53313)
In the Linux kernel, the following vulnerability has been resolved:
ext2/dax: Fix ext2_setsize when len is page aligned (CVE-2023-53323)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (CVE-2023-53333)
In the Linux kernel, the following vulnerability has been resolved:
icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (CVE-2023-53343)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (CVE-2023-53357)
In the Linux kernel, the following vulnerability has been resolved:
bus: fsl-mc: don't assume child devices are all fsl-mc devices (CVE-2023-53362)
In the Linux kernel, the following vulnerability has been resolved:
cifs: prevent use-after-free by freeing the cfile later (CVE-2023-53377)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (CVE-2023-53380)
In the Linux kernel, the following vulnerability has been resolved:
shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (CVE-2023-53391)
In the Linux kernel, the following vulnerability has been resolved:
ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() (CVE-2023-53420)
In the Linux kernel, the following vulnerability has been resolved:
bpf: cpumap: Fix memory leak in cpu_map_update_elem (CVE-2023-53441)
In the Linux kernel, the following vulnerability has been resolved:
PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (CVE-2023-53446)
In the Linux kernel, the following vulnerability has been resolved:
io_uring: wait interruptibly for request completions on exit (CVE-2023-53461)
In the Linux kernel, the following vulnerability has been resolved:
tracing/histograms: Add histograms to hist_vars if they have referenced variables (CVE-2023-53560)
In the Linux kernel, the following vulnerability has been resolved:
bonding: do not assume skb mac_header is set (CVE-2023-53601)
In the Linux kernel, the following vulnerability has been resolved:
dax: Fix dax_mapping_release() use after free (CVE-2023-53613)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (CVE-2023-53619)
In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi: Don't migrate perf to the CPU going to teardown (CVE-2023-53656)
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Fix deadloop issue on reading trace_pipe (CVE-2023-53668)
In the Linux kernel, the following vulnerability has been resolved:
nvme-core: fix dev_pm_qos memleak (CVE-2023-53670)
In the Linux kernel, the following vulnerability has been resolved:
clk: Fix memory leak in devm_clk_notifier_register() (CVE-2023-53674)
In the Linux kernel, the following vulnerability has been resolved:
bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (CVE-2023-53681)
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system. (CVE-2024-0639)
Affected Packages:
kernel
Issue Correction:
Run dnf update kernel --releasever 2023.1.20230825 or dnf update --advisory ALAS2023-2023-299 --releasever 2023.1.20230825 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
aarch64:
bpftool-6.1.41-63.109.amzn2023.aarch64
python3-perf-debuginfo-6.1.41-63.109.amzn2023.aarch64
kernel-libbpf-static-6.1.41-63.109.amzn2023.aarch64
perf-debuginfo-6.1.41-63.109.amzn2023.aarch64
python3-perf-6.1.41-63.109.amzn2023.aarch64
kernel-tools-devel-6.1.41-63.109.amzn2023.aarch64
kernel-libbpf-6.1.41-63.109.amzn2023.aarch64
perf-6.1.41-63.109.amzn2023.aarch64
kernel-livepatch-6.1.41-63.109-1.0-0.amzn2023.aarch64
kernel-tools-6.1.41-63.109.amzn2023.aarch64
kernel-libbpf-devel-6.1.41-63.109.amzn2023.aarch64
bpftool-debuginfo-6.1.41-63.109.amzn2023.aarch64
kernel-headers-6.1.41-63.109.amzn2023.aarch64
kernel-tools-debuginfo-6.1.41-63.109.amzn2023.aarch64
kernel-6.1.41-63.109.amzn2023.aarch64
kernel-debuginfo-6.1.41-63.109.amzn2023.aarch64
kernel-debuginfo-common-aarch64-6.1.41-63.109.amzn2023.aarch64
kernel-devel-6.1.41-63.109.amzn2023.aarch64
src:
kernel-6.1.41-63.109.amzn2023.src
x86_64:
kernel-livepatch-6.1.41-63.109-1.0-0.amzn2023.x86_64
bpftool-6.1.41-63.109.amzn2023.x86_64
kernel-libbpf-devel-6.1.41-63.109.amzn2023.x86_64
kernel-tools-6.1.41-63.109.amzn2023.x86_64
kernel-tools-debuginfo-6.1.41-63.109.amzn2023.x86_64
perf-debuginfo-6.1.41-63.109.amzn2023.x86_64
kernel-libbpf-6.1.41-63.109.amzn2023.x86_64
python3-perf-debuginfo-6.1.41-63.109.amzn2023.x86_64
bpftool-debuginfo-6.1.41-63.109.amzn2023.x86_64
python3-perf-6.1.41-63.109.amzn2023.x86_64
kernel-libbpf-static-6.1.41-63.109.amzn2023.x86_64
kernel-headers-6.1.41-63.109.amzn2023.x86_64
kernel-tools-devel-6.1.41-63.109.amzn2023.x86_64
perf-6.1.41-63.109.amzn2023.x86_64
kernel-debuginfo-6.1.41-63.109.amzn2023.x86_64
kernel-6.1.41-63.109.amzn2023.x86_64
kernel-debuginfo-common-x86_64-6.1.41-63.109.amzn2023.x86_64
kernel-devel-6.1.41-63.109.amzn2023.x86_64
2025-10-18: CVE-2023-53560 was added to this advisory.
2025-10-18: CVE-2023-53461 was added to this advisory.
2025-10-18: CVE-2023-53681 was added to this advisory.
2025-10-18: CVE-2023-53674 was added to this advisory.
2025-10-18: CVE-2023-53619 was added to this advisory.
2025-10-18: CVE-2023-53613 was added to this advisory.
2025-10-18: CVE-2023-53656 was added to this advisory.
2025-10-18: CVE-2023-53670 was added to this advisory.
2025-10-18: CVE-2023-53668 was added to this advisory.
2025-10-18: CVE-2023-53601 was added to this advisory.
2025-10-02: CVE-2023-53362 was added to this advisory.
2025-10-02: CVE-2023-53312 was added to this advisory.
2025-10-02: CVE-2023-53313 was added to this advisory.
2025-10-02: CVE-2023-53243 was added to this advisory.
2025-10-02: CVE-2023-53420 was added to this advisory.
2025-10-02: CVE-2023-53391 was added to this advisory.
2025-10-02: CVE-2023-53446 was added to this advisory.
2025-10-02: CVE-2023-53441 was added to this advisory.
2025-10-02: CVE-2023-53167 was added to this advisory.
2025-10-02: CVE-2023-53380 was added to this advisory.
2025-10-02: CVE-2023-53377 was added to this advisory.
2025-10-02: CVE-2023-53333 was added to this advisory.
2025-10-02: CVE-2023-53221 was added to this advisory.
2025-09-22: CVE-2023-53343 was added to this advisory.
2025-09-22: CVE-2023-53357 was added to this advisory.
2025-09-22: CVE-2023-53323 was added to this advisory.
2025-09-22: CVE-2023-53189 was added to this advisory.
2025-02-26: CVE-2023-52885 was added to this advisory.
2024-07-03: CVE-2023-51043 was added to this advisory.
2024-02-01: CVE-2024-0639 was added to this advisory.
2024-01-03: CVE-2023-39197 was added to this advisory.
2023-10-12: CVE-2023-44466 was added to this advisory.
2023-10-10: CVE-2022-48502 was added to this advisory.