# ALAS2023-2024-517: Security update for 21 packages

ALAS2023-2024-517, released February 15, 2024, fixes 31 CVEs across 21 products. One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2024-517
- Platform: Linux
- Released: Feb 15, 2024
- Priority: Patch now (Closes CVE-2024-1086, exploited (CISA KEV, ransomware))
- CVEs: 31, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2024-517.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-livepatch-6.1.77-99.164](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.77-99.164.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.77-99.164.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-1086](https://patchblox.com/security/data/cve/CVE-2024-1086.md) | Patch now | linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... | 7.8 | 0.2806 | CISA KEV, Ransomware |
| [CVE-2023-52489](https://patchblox.com/security/data/cve/CVE-2023-52489.md) | High | dtb-aarch64: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). | 8.0 | 0.0029 |  |
| [CVE-2023-52614](https://patchblox.com/security/data/cve/CVE-2023-52614.md) | High | bpftool: ELSA-2024-9315: kernel security update (MODERATE) | 7.8 | 0.0026 |  |
| [CVE-2024-26808](https://patchblox.com/security/data/cve/CVE-2024-26808.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_chain_filter: handle NETDEV_UNREG... | 7.8 | 0.0026 |  |
| [CVE-2024-26625](https://patchblox.com/security/data/cve/CVE-2024-26625.md) | High | dtb-aarch64: Call sock_orphan() at release time (bsc#1221086) | 7.8 | 0.0025 |  |
| [CVE-2024-26668](https://patchblox.com/security/data/cve/CVE-2024-26668.md) | High | dtb-aarch64: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335). | 7.1 | 0.0024 |  |
| [CVE-2023-52621](https://patchblox.com/security/data/cve/CVE-2023-52621.md) | High | bpftool: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Hou Tao) [Orabug: 37283326] | 7.8 | 0.0024 |  |
| [CVE-2024-26673](https://patchblox.com/security/data/cve/CVE-2024-26673.md) | High | dtb-aarch64: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368). | 7.1 | 0.0024 |  |
| [CVE-2024-26638](https://patchblox.com/security/data/cve/CVE-2024-26638.md) | High | dtb-aarch64: Fixed uninitialize struct msghdr completely (bsc#1221649 . | 7.8 | 0.0022 |  |
| [CVE-2023-52615](https://patchblox.com/security/data/cve/CVE-2023-52615.md) | High | bpftool: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] | 7.0 | 0.0020 |  |
| [CVE-2024-26671](https://patchblox.com/security/data/cve/CVE-2024-26671.md) | High | dtb-aarch64: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357). | 8.0 | 0.0019 |  |
| [CVE-2024-26614](https://patchblox.com/security/data/cve/CVE-2024-26614.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: make sure init the accept_queue's spinlocks... | 7.8 | 0.0018 |  |
| [CVE-2024-26972](https://patchblox.com/security/data/cve/CVE-2024-26972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ubifs: ubifs_symlink: Fix memleak of inode->i_li... | n/a | n/a |  |
| [CVE-2024-26626](https://patchblox.com/security/data/cve/CVE-2024-26626.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ipmr: fix kernel panic when forwarding mcast pac... | 5.5 | 0.0064 |  |
| [CVE-2024-26641](https://patchblox.com/security/data/cve/CVE-2024-26641.md) | Routine | dtb-aarch64: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). | 5.5 | 0.0058 |  |
| [CVE-2024-23849](https://patchblox.com/security/data/cve/CVE-2024-23849.md) | Routine | linux: In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an... | 5.5 | 0.0031 |  |
| [CVE-2023-52623](https://patchblox.com/security/data/cve/CVE-2023-52623.md) | Routine | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0028 |  |
| [CVE-2023-52492](https://patchblox.com/security/data/cve/CVE-2023-52492.md) | Routine | kernel-azure: Security update for the Linux Kernel | 4.4 | 0.0027 |  |
| [CVE-2023-52672](https://patchblox.com/security/data/cve/CVE-2023-52672.md) | Routine | kernel-64kb: pipe: wakeup wr_wait after setting max_usage (bsc#1224614). | 5.5 | 0.0026 |  |
| [CVE-2023-52619](https://patchblox.com/security/data/cve/CVE-2023-52619.md) | Routine | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0024 |  |
| [CVE-2023-52622](https://patchblox.com/security/data/cve/CVE-2023-52622.md) | Routine | dtb-aarch64: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080). | 5.5 | 0.0024 |  |
| [CVE-2024-26627](https://patchblox.com/security/data/cve/CVE-2024-26627.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: core: Move scsi_host_busy() out of host lo... | 5.5 | 0.0024 |  |
| [CVE-2024-26635](https://patchblox.com/security/data/cve/CVE-2024-26635.md) | Routine | kernel-obs-build: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). | 5.5 | 0.0024 |  |
| [CVE-2024-26640](https://patchblox.com/security/data/cve/CVE-2024-26640.md) | Routine | kernel-default-base: tcp: add sanity checks to rx zerocopy (bsc#1221650). | 5.5 | 0.0024 |  |
| [CVE-2024-26612](https://patchblox.com/security/data/cve/CVE-2024-26612.md) | Routine | bpftool: ELSA-2024-9315: kernel security update (MODERATE) | 5.5 | 0.0024 |  |
| [CVE-2023-52498](https://patchblox.com/security/data/cve/CVE-2023-52498.md) | Routine | bpftool: ELSA-2024-9315: kernel security update (MODERATE) | 5.5 | 0.0024 |  |
| [CVE-2024-26646](https://patchblox.com/security/data/cve/CVE-2024-26646.md) | Routine | bpftool: ELSA-2024-9315: kernel security update (MODERATE) | 5.5 | 0.0024 |  |
| [CVE-2023-52486](https://patchblox.com/security/data/cve/CVE-2023-52486.md) | Routine | python3-perf: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0023 |  |
| [CVE-2024-26644](https://patchblox.com/security/data/cve/CVE-2024-26644.md) | Routine | kernel-uek: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [Orabug: 36530119] | 5.5 | 0.0023 |  |
| [CVE-2024-26634](https://patchblox.com/security/data/cve/CVE-2024-26634.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-52583](https://patchblox.com/security/data/cve/CVE-2023-52583.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: fix deadlock or deadcode of misusing dget(... | 5.5 | 0.0018 |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.