# ALAS2023-2024-679: Security update for 21 packages ALAS2023-2024-679, released August 1, 2024, fixes 40 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2024-679 - Platform: Linux - Released: Aug 1, 2024 - Priority: High (Closes CVE-2024-41007, high severity) - CVEs: 40, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2024-679.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-livepatch-6.1.102-108.177](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.102-108.177.md) | amzn 2023 | 1.0-0.amzn2023 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | | [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.102-108.177.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-41007](https://patchblox.com/security/data/cve/CVE-2024-41007.md) | High | dtb-aarch64: tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863). | 7.8 | 0.0077 | | | [CVE-2024-41073](https://patchblox.com/security/data/cve/CVE-2024-41073.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.1 | 0.0067 | | | [CVE-2024-41035](https://patchblox.com/security/data/cve/CVE-2024-41035.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 | | | [CVE-2024-41041](https://patchblox.com/security/data/cve/CVE-2024-41041.md) | High | dtb-aarch64: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520). | 7.8 | 0.0029 | | | [CVE-2024-41050](https://patchblox.com/security/data/cve/CVE-2024-41050.md) | High | dtb-aarch64: cachefiles: cyclic allocation of msg_id to avoid reuse (bsc#1228499). | 7.8 | 0.0028 | | | [CVE-2024-41058](https://patchblox.com/security/data/cve/CVE-2024-41058.md) | High | dtb-aarch64: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459). | 7.8 | 0.0028 | | | [CVE-2024-41049](https://patchblox.com/security/data/cve/CVE-2024-41049.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0028 | | | [CVE-2024-41057](https://patchblox.com/security/data/cve/CVE-2024-41057.md) | High | dtb-aarch64: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462). | 7.0 | 0.0028 | | | [CVE-2024-41051](https://patchblox.com/security/data/cve/CVE-2024-41051.md) | High | dtb-aarch64: cachefiles: wait for ondemand_object_worker to finish when dropping object (bsc#1228468). | 7.8 | 0.0028 | | | [CVE-2024-42154](https://patchblox.com/security/data/cve/CVE-2024-42154.md) | High | dtb-aarch64: tcp_metrics: validate source addr length (bsc#1228507). | 7.8 | 0.0026 | | | [CVE-2024-41090](https://patchblox.com/security/data/cve/CVE-2024-41090.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | | | [CVE-2024-41091](https://patchblox.com/security/data/cve/CVE-2024-41091.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | | | [CVE-2024-41055](https://patchblox.com/security/data/cve/CVE-2024-41055.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-42131](https://patchblox.com/security/data/cve/CVE-2024-42131.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-39487](https://patchblox.com/security/data/cve/CVE-2024-39487.md) | High | kernel-doc: RHSA-2024:5101: kernel security update (Important) | 7.1 | 0.0025 | | | [CVE-2024-42136](https://patchblox.com/security/data/cve/CVE-2024-42136.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-42246](https://patchblox.com/security/data/cve/CVE-2024-42246.md) | High | dtb-aarch64: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). | 7.8 | 0.0023 | | | [CVE-2024-41012](https://patchblox.com/security/data/cve/CVE-2024-41012.md) | High | dtb-aarch64: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247). | 7.8 | 0.0023 | | | [CVE-2024-41019](https://patchblox.com/security/data/cve/CVE-2024-41019.md) | High | bpftool: fs/ntfs3: Validate ff offset (lei lu) [Orabug: 36891672] | 7.1 | 0.0022 | | | [CVE-2024-41074](https://patchblox.com/security/data/cve/CVE-2024-41074.md) | High | dtb-aarch64: cachefiles: Set object to close if ondemand_id < 0 in copen (bsc#1228643). | 7.8 | 0.0022 | | | [CVE-2024-42240](https://patchblox.com/security/data/cve/CVE-2024-42240.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-41076](https://patchblox.com/security/data/cve/CVE-2024-41076.md) | High | dtb-aarch64: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649). | 7.8 | 0.0021 | | | [CVE-2024-41081](https://patchblox.com/security/data/cve/CVE-2024-41081.md) | Routine | dtb-aarch64: ila: block BH in ila_output() (bsc#1228617). | 5.5 | 0.0087 | | | [CVE-2024-41048](https://patchblox.com/security/data/cve/CVE-2024-41048.md) | Routine | dtb-aarch64: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565). | 5.5 | 0.0082 | | | [CVE-2024-42232](https://patchblox.com/security/data/cve/CVE-2024-42232.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0076 | | | [CVE-2024-42247](https://patchblox.com/security/data/cve/CVE-2024-42247.md) | Routine | dtb-aarch64: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988). | 5.5 | 0.0072 | | | [CVE-2024-41027](https://patchblox.com/security/data/cve/CVE-2024-41027.md) | Routine | bpftool: Fix userfaultfd_api to return EINVAL as expected (Audra Mitchell) [Orabug: 36896804] | 3.3 | 0.0028 | | | [CVE-2024-42106](https://patchblox.com/security/data/cve/CVE-2024-42106.md) | Routine | dtb-aarch64: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). | 5.5 | 0.0027 | | | [CVE-2024-40947](https://patchblox.com/security/data/cve/CVE-2024-40947.md) | Routine | dtb-aarch64: ima: Avoid blocking in RCU read-side critical section (bsc#1227803). | 5.5 | 0.0026 | | | [CVE-2024-42102](https://patchblox.com/security/data/cve/CVE-2024-42102.md) | Routine | dtb-aarch64: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132). | 4.7 | 0.0026 | | | [CVE-2024-42103](https://patchblox.com/security/data/cve/CVE-2024-42103.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-42109](https://patchblox.com/security/data/cve/CVE-2024-42109.md) | Routine | dtb-aarch64: netfilter: nf_tables: unconditionally flush pending work before notifier (bsc#1228505). | 5.5 | 0.0025 | | | [CVE-2024-42244](https://patchblox.com/security/data/cve/CVE-2024-42244.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-42229](https://patchblox.com/security/data/cve/CVE-2024-42229.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.1 | 0.0023 | | | [CVE-2024-41077](https://patchblox.com/security/data/cve/CVE-2024-41077.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-41078](https://patchblox.com/security/data/cve/CVE-2024-41078.md) | Routine | dtb-aarch64: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655). | 5.5 | 0.0022 | | | [CVE-2024-42161](https://patchblox.com/security/data/cve/CVE-2024-42161.md) | Routine | dtb-aarch64: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756). | 6.3 | 0.0022 | | | [CVE-2024-41075](https://patchblox.com/security/data/cve/CVE-2024-41075.md) | Routine | dtb-aarch64: cachefiles: add consistency check for copen/cread (bsc#1228646). | 5.5 | 0.0022 | | | [CVE-2024-41020](https://patchblox.com/security/data/cve/CVE-2024-41020.md) | Routine | dtb-aarch64: filelock: Fix fcntl/close race recovery compat path (bsc#1228427). | 6.7 | 0.0020 | | | [CVE-2024-42245](https://patchblox.com/security/data/cve/CVE-2024-42245.md) | Routine | dtb-aarch64: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978). | 5.5 | 0.0017 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.