Linux · Amazon Linux · Security advisory · May 25, 2023

ALAS2023-2023-184: Security update for 19 packages

ALAS2023-2023-184, released May 25, 2023, fixes 50 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
50
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.1344
96th percentile

Priority of the 50 CVEs

Patch now 0 Urgent 2 High 26 Routine 22

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.29-47.49.amzn2023
bpftool-debuginfoamzn 20236.1.29-47.49.amzn2023
kernelamzn 20236.1.29-47.49.amzn2023
kernel-debuginfoamzn 20236.1.29-47.49.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.29-47.49.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.29-47.49.amzn2023
kernel-develamzn 20236.1.29-47.49.amzn2023
kernel-headersamzn 20236.1.29-47.49.amzn2023
kernel-libbpfamzn 20236.1.29-47.49.amzn2023
kernel-libbpf-develamzn 20236.1.29-47.49.amzn2023
kernel-libbpf-staticamzn 20236.1.29-47.49.amzn2023
kernel-livepatch-6.1.29-47.49amzn 20231.0-0.amzn2023
kernel-toolsamzn 20236.1.29-47.49.amzn2023
kernel-tools-debuginfoamzn 20236.1.29-47.49.amzn2023
kernel-tools-develamzn 20236.1.29-47.49.amzn2023
perfamzn 20236.1.29-47.49.amzn2023
perf-debuginfoamzn 20236.1.29-47.49.amzn2023
python3-perfamzn 20236.1.29-47.49.amzn2023
python3-perf-debuginfoamzn 20236.1.29-47.49.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2023-53867 linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trim...9.8 0.0053 None reported
Urgent CVE-2023-53751 linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_S...9.8 0.0044 None reported
High CVE-2023-32233 bpftool: netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382083]7.8 0.1344 None reported
High CVE-2023-53586 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUN_RESET handling T...8.0 0.0046 None reported
High CVE-2023-54044 linux: In the Linux kernel, the following vulnerability has been resolved: spmi: Add a check for remove callback when remov...n/a 0.0028 None reported
High CVE-2023-54158 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified...n/a 0.0024 None reported
High CVE-2023-54056 linux: In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char...n/a 0.0023 None reported
High CVE-2024-0775 linux: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel7.1 0.0023 None reported
High CVE-2023-54007 linux: In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_pol...n/a 0.0022 None reported
High CVE-2023-53798 linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: Fix uninitialized number of lanes It i...8.0 0.0022 None reported
High CVE-2023-54002 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when st...n/a 0.0020 None reported
High CVE-2023-54311 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline dir...n/a 0.0020 None reported
High CVE-2023-54248 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add check for kmemdup Since the kmemd...n/a 0.0020 None reported
High CVE-2023-54063 bpftool: In the Linux kernel, the following vulnerability has been resolved7.8 0.0020 None reported
High CVE-2023-54077 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfs_read_mft faile...7.8 0.0018 None reported
High CVE-2023-53473 bpftool: RHSA-2024:2394: kernel security, bug fix, and enhancement update (Important)7.8 0.0017 None reported
High CVE-2023-53587 linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destru...7.8 0.0017 None reported
High CVE-2023-53988 bpftool: In the Linux kernel, the following vulnerability has been resolved7.8 0.0017 None reported
High CVE-2023-53536 bpftool: RHSA-2024:2394: kernel security, bug fix, and enhancement update (Important)7.8 0.0016 None reported
High CVE-2023-53692 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free read in ext4_find_exten...7.8 0.0016 None reported
High CVE-2023-54062 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4_xattr_mo...7.8 0.0016 None reported
High CVE-2023-54193 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: remove block_cb from driver_...7.8 0.0016 None reported
High CVE-2023-53285 bpftool: In the Linux kernel, the following vulnerability has been resolved7.8 0.0016 None reported
High CVE-2023-53604 bpftool: In the Linux kernel, the following vulnerability has been resolved7.8 0.0016 None reported
High CVE-2023-53990 bpftool: In the Linux kernel, the following vulnerability has been resolved7.8 0.0016 None reported
Showing 1 to 25 of 50 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.