Linux · Amazon Linux · Security advisory · March 30, 2023

ALAS2023-2023-148: Security update for 19 packages

ALAS2023-2023-148, released March 30, 2023, fixes 31 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
31
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0047
40th percentile

Priority of the 31 CVEs

Patch now 0 Urgent 0 High 16 Routine 15

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.21-1.45.amzn2023
bpftool-debuginfoamzn 20236.1.21-1.45.amzn2023
kernelamzn 20236.1.21-1.45.amzn2023
kernel-debuginfoamzn 20236.1.21-1.45.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.21-1.45.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.21-1.45.amzn2023
kernel-develamzn 20236.1.21-1.45.amzn2023
kernel-headersamzn 20236.1.21-1.45.amzn2023
kernel-libbpfamzn 20236.1.21-1.45.amzn2023
kernel-libbpf-develamzn 20236.1.21-1.45.amzn2023
kernel-libbpf-staticamzn 20236.1.21-1.45.amzn2023
kernel-livepatch-6.1.21-1.45amzn 20231.0-0.amzn2023
kernel-toolsamzn 20236.1.21-1.45.amzn2023
kernel-tools-debuginfoamzn 20236.1.21-1.45.amzn2023
kernel-tools-develamzn 20236.1.21-1.45.amzn2023
perfamzn 20236.1.21-1.45.amzn2023
perf-debuginfoamzn 20236.1.21-1.45.amzn2023
python3-perfamzn 20236.1.21-1.45.amzn2023
python3-perf-debuginfoamzn 20236.1.21-1.45.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-28466 bpftool: net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua)7.0 0.0027 None reported
High CVE-2023-2235 linux: A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privil...8.1 0.0025 None reported
High CVE-2023-53081 linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write W...7.8 0.0021 None reported
High CVE-2023-53084 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)7.8 0.0021 None reported
High CVE-2023-53111 linux: In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_fileback...7.8 0.0021 None reported
High CVE-2023-53117 kernel-rt-debug-modules-core: RHSA-2025:6966: kernel security update (Moderate)7.1 0.0021 None reported
High CVE-2023-53075 linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec...7.8 0.0021 None reported
High CVE-2023-53089 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)8.0 0.0020 None reported
High CVE-2023-53107 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)7.8 0.0020 None reported
High CVE-2023-53112 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)7.1 0.0020 None reported
High CVE-2023-53103 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)8.0 0.0020 None reported
High CVE-2023-53070 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)8.0 0.0020 None reported
High CVE-2023-53136 bpftool: In the Linux kernel, the following vulnerability has been resolved7.1 0.0019 None reported
High CVE-2023-53123 bpftool: In the Linux kernel, the following vulnerability has been resolved7.8 0.0019 None reported
High CVE-2023-53140 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/${proc_name} d...8.0 0.0019 None reported
High CVE-2023-53137 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a dire...n/a n/a None reported
Routine CVE-2023-30456 linux: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.86.5 0.0047 None reported
Routine CVE-2023-53087 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)5.5 0.0022 None reported
Routine CVE-2023-53091 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after...5.5 0.0022 None reported
Routine CVE-2022-49932 KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace5.5 0.0021 None reported
Routine CVE-2023-53100 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)5.5 0.0021 None reported
Routine CVE-2023-53101 bpftool: In the Linux kernel, the following vulnerability has been resolved5.5 0.0020 None reported
Routine CVE-2023-53096 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)5.5 0.0020 None reported
Routine CVE-2023-53109 linux: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev-...5.5 0.0020 None reported
Routine CVE-2023-53095 kernel-debug-uki-virt: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important)5.5 0.0020 None reported
Showing 1 to 25 of 31 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.