# ALAS2023-2024-549: Security update for 21 packages ALAS2023-2024-549, released February 29, 2024, fixes 38 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2024-549 - Platform: Linux - Released: Feb 29, 2024 - Priority: Urgent (Closes CVE-2024-26828, rated Critical) - CVEs: 38, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2024-549.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-livepatch-6.1.79-99.164](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.79-99.164.md) | amzn 2023 | 1.0-0.amzn2023 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | | [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.79-99.164.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-26828](https://patchblox.com/security/data/cve/CVE-2024-26828.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces()... | 9.4 | 0.0075 | | | [CVE-2024-26581](https://patchblox.com/security/data/cve/CVE-2024-26581.md) | High | kernel-64k-modules-core: kernel: nftables: nft_set_rbtree skip end interval element from gc | 7.8 | 0.0222 | | | [CVE-2023-52434](https://patchblox.com/security/data/cve/CVE-2023-52434.md) | High | dtb-aarch64: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148). | 8.0 | 0.0102 | | | [CVE-2024-26582](https://patchblox.com/security/data/cve/CVE-2024-26582.md) | High | bpftool: net: tls: fix use-after-free with partial reads and async decrypt (Sabrina Dubroca) [RHEL-26398 RHEL-26401] | 7.8 | 0.0072 | | | [CVE-2024-26689](https://patchblox.com/security/data/cve/CVE-2024-26689.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encode_cap_msg()... | 7.8 | 0.0070 | | | [CVE-2024-26665](https://patchblox.com/security/data/cve/CVE-2024-26665.md) | High | dtb-aarch64: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). | 7.8 | 0.0068 | | | [CVE-2024-26826](https://patchblox.com/security/data/cve/CVE-2024-26826.md) | High | kernel-zfcpdump-modules-extra: kernel: mptcp: fix data re-injection from stale subflow | 7.0 | 0.0065 | | | [CVE-2024-26583](https://patchblox.com/security/data/cve/CVE-2024-26583.md) | High | bpftool: tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26585} | 7.0 | 0.0055 | | | [CVE-2024-26602](https://patchblox.com/security/data/cve/CVE-2024-26602.md) | High | bpftool: sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] | 8.0 | 0.0032 | | | [CVE-2024-0841](https://patchblox.com/security/data/cve/CVE-2024-0841.md) | High | bpftool: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] | 8.0 | 0.0030 | | | [CVE-2024-26704](https://patchblox.com/security/data/cve/CVE-2024-26704.md) | High | dtb-aarch64: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422). | 7.8 | 0.0027 | | | [CVE-2024-26720](https://patchblox.com/security/data/cve/CVE-2024-26720.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/writeback: fix possible divide-by-zero in wb_... | 7.8 | n/a | | | [CVE-2024-2193](https://patchblox.com/security/data/cve/CVE-2024-2193.md) | Routine | xen: A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative executi... | 5.7 | 0.0128 | | | [CVE-2024-23850](https://patchblox.com/security/data/cve/CVE-2024-23850.md) | Routine | linux: In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and... | 5.5 | 0.0031 | | | [CVE-2024-23851](https://patchblox.com/security/data/cve/CVE-2024-23851.md) | Routine | linux: copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX byte... | 5.5 | 0.0030 | | | [CVE-2024-26601](https://patchblox.com/security/data/cve/CVE-2024-26601.md) | Routine | kernel-syms: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342). | 5.5 | 0.0029 | | | [CVE-2024-26603](https://patchblox.com/security/data/cve/CVE-2024-26603.md) | Routine | bpftool: x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] | 5.5 | 0.0028 | | | [CVE-2024-1151](https://patchblox.com/security/data/cve/CVE-2024-1151.md) | Routine | Kernel: stack overflow problem in open vswitch kernel module leading to dos | 5.5 | 0.0027 | | | [CVE-2024-26726](https://patchblox.com/security/data/cve/CVE-2024-26726.md) | Routine | kernel-source-azure: Do not drop extent_map for free space inode on write error (bsc#1222532) | 5.5 | 0.0026 | | | [CVE-2024-26920](https://patchblox.com/security/data/cve/CVE-2024-26920.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-52429](https://patchblox.com/security/data/cve/CVE-2023-52429.md) | Routine | linux: dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate... | 5.5 | 0.0025 | | | [CVE-2024-26688](https://patchblox.com/security/data/cve/CVE-2024-26688.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fs,hugetlb: fix NULL pointer dereference in huge... | 5.5 | 0.0025 | | | [CVE-2023-52616](https://patchblox.com/security/data/cve/CVE-2023-52616.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-26820](https://patchblox.com/security/data/cve/CVE-2024-26820.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DE... | 5.5 | 0.0024 | | | [CVE-2024-0340](https://patchblox.com/security/data/cve/CVE-2024-0340.md) | Routine | kernel: vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] | 5.5 | 0.0024 | | | [CVE-2024-26718](https://patchblox.com/security/data/cve/CVE-2024-26718.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets Tasklets... | 5.5 | 0.0024 | | | [CVE-2023-52435](https://patchblox.com/security/data/cve/CVE-2023-52435.md) | Routine | dtb-aarch64: net: prevent mss overflow in skb_segment() (bsc#1220138). | 5.5 | 0.0023 | | | [CVE-2024-26676](https://patchblox.com/security/data/cve/CVE-2024-26676.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-26727](https://patchblox.com/security/data/cve/CVE-2024-26727.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() if the newly created subv... | 5.5 | 0.0023 | | | [CVE-2024-26707](https://patchblox.com/security/data/cve/CVE-2024-26707.md) | Routine | bpftool: ELSA-2024-9315: kernel security update (MODERATE) | 5.5 | 0.0023 | | | [CVE-2023-52631](https://patchblox.com/security/data/cve/CVE-2023-52631.md) | Routine | kernel-default: Fixed an NULL dereference bug (bsc#1222264 . | 5.5 | 0.0023 | | | [CVE-2024-26681](https://patchblox.com/security/data/cve/CVE-2024-26681.md) | Routine | bpftool: netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Eric Dumazet) [Orabug: 36530387] | 5.5 | 0.0023 | | | [CVE-2024-50017](https://patchblox.com/security/data/cve/CVE-2024-50017.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-26629](https://patchblox.com/security/data/cve/CVE-2024-26629.md) | Routine | bpftool: nfsd: fix RELEASE_LOCKOWNER (Benjamin Coddington) [RHEL-42578 RHEL-34875] | 5.5 | 0.0020 | | | [CVE-2024-26696](https://patchblox.com/security/data/cve/CVE-2024-26696.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2024-26679](https://patchblox.com/security/data/cve/CVE-2024-26679.md) | Routine | kernel-source-azure: Read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock | 5.5 | 0.0018 | | | [CVE-2024-26698](https://patchblox.com/security/data/cve/CVE-2024-26698.md) | Routine | perf: (CVE-2023-52619) | 4.7 | 0.0018 | | | [CVE-2024-26910](https://patchblox.com/security/data/cve/CVE-2024-26910.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in... | 4.7 | 0.0018 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.