{
  "fix": "ALAS2023-2023-461",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2023-461",
  "summary": "ALAS2023-2023-461, released December 13, 2023, fixes 33 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 20 packages",
  "released": "2023-12-13T20:28:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2023-6932, high severity",
  "supported": true,
  "cveCount": 33,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00367,
  "maxCvss": 8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2023-461.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.66-91.160",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.66-91.160",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.66-91.160.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-6932",
      "url": "https://patchblox.com/security/cve/CVE-2023-6932",
      "title": "bpftool: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Hangbin Liu) [RHEL-19794]",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8,
      "epss": 0.00367,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52846",
      "url": "https://patchblox.com/security/cve/CVE-2023-52846",
      "title": "dtb-aarch64: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6622",
      "url": "https://patchblox.com/security/cve/CVE-2023-6622",
      "title": "linux: A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in...",
      "priority": "High",
      "severity": "medium",
      "cvss": 8,
      "epss": 0.00321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6111",
      "url": "https://patchblox.com/security/cve/CVE-2023-6111",
      "title": "bpftool: netfilter: nf_tables: remove catchall element in GC sync path (Pablo Neira Ayuso) [Orabug: 36028059]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00317,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52813",
      "url": "https://patchblox.com/security/cve/CVE-2023-52813",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00286,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52864",
      "url": "https://patchblox.com/security/cve/CVE-2023-52864",
      "title": "kernel-rt-debug-devel: kernel: platform/x86: wmi: Fix opening of char device",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-47432",
      "url": "https://patchblox.com/security/cve/CVE-2021-47432",
      "title": "kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52835",
      "url": "https://patchblox.com/security/cve/CVE-2023-52835",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52837",
      "url": "https://patchblox.com/security/cve/CVE-2023-52837",
      "title": "dtb-aarch64: nbd: fix uaf in nbd_open (bsc#1224935).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52752",
      "url": "https://patchblox.com/security/cve/CVE-2023-52752",
      "title": "dtb-aarch64: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52796",
      "url": "https://patchblox.com/security/cve/CVE-2023-52796",
      "title": "dtb-aarch64: Add ipvlan_route_v6_outbound() helper (bsc#1224930).",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52772",
      "url": "https://patchblox.com/security/cve/CVE-2023-52772",
      "title": "dtb-aarch64: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52840",
      "url": "https://patchblox.com/security/cve/CVE-2023-52840",
      "title": "dtb-aarch64: Fix use after free in rmi_unregister_function() (bsc#1224928).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52854",
      "url": "https://patchblox.com/security/cve/CVE-2023-52854",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52859",
      "url": "https://patchblox.com/security/cve/CVE-2023-52859",
      "title": "dtb-aarch64: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52781",
      "url": "https://patchblox.com/security/cve/CVE-2023-52781",
      "title": "kernel-rt-debug-modules-extra: kernel: usb: , CVE-2023-52877)",
      "priority": "High",
      "severity": "important",
      "cvss": 7,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52868",
      "url": "https://patchblox.com/security/cve/CVE-2023-52868",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52757",
      "url": "https://patchblox.com/security/cve/CVE-2023-52757",
      "title": "dtb-aarch64: Fixed potential deadlock when releasing mids (bsc#1225548).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0584",
      "url": "https://patchblox.com/security/cve/CVE-2024-0584",
      "title": "bpftool: A use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0607",
      "url": "https://patchblox.com/security/cve/CVE-2024-0607",
      "title": "kernel-uek-container: ELSA-2024-12275: Unbreakable Enterprise kernel-container security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.6,
      "epss": 0.00258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52828",
      "url": "https://patchblox.com/security/cve/CVE-2023-52828",
      "title": "bpftool: In the Linux kernel, the following vulnerability has been resolved",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52843",
      "url": "https://patchblox.com/security/cve/CVE-2023-52843",
      "title": "dtb-aarch64: llc: verify mac len before reading mac header (bsc#1224951).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52762",
      "url": "https://patchblox.com/security/cve/CVE-2023-52762",
      "title": "kernel-rt-kvm: (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619)",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52784",
      "url": "https://patchblox.com/security/cve/CVE-2023-52784",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52791",
      "url": "https://patchblox.com/security/cve/CVE-2023-52791",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52831",
      "url": "https://patchblox.com/security/cve/CVE-2023-52831",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52778",
      "url": "https://patchblox.com/security/cve/CVE-2023-52778",
      "title": "dtb-aarch64: mptcp: deal with large GSO size (bsc#1224948).",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52860",
      "url": "https://patchblox.com/security/cve/CVE-2023-52860",
      "title": "dtb-aarch64: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52763",
      "url": "https://patchblox.com/security/cve/CVE-2023-52763",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52788",
      "url": "https://patchblox.com/security/cve/CVE-2023-52788",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52803",
      "url": "https://patchblox.com/security/cve/CVE-2023-52803",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52879",
      "url": "https://patchblox.com/security/cve/CVE-2023-52879",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52869",
      "url": "https://patchblox.com/security/cve/CVE-2023-52869",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}