Linux · 
Amazon Linux · Security advisory · August 1, 2024
Amazon Linux · Security advisory · August 1, 2024ALAS2023-2024-696: Security update for 21 packages
ALAS2023-2024-696, released August 1, 2024, fixes 64 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
64
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0096
61st percentile
Priority of the 64 CVEs
Patch now 0
Urgent 0
High 25
Routine 39
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 6.1.84-99.169.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-debuginfo | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-devel | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-headers | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-libbpf | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-libbpf-devel | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-libbpf-static | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-livepatch-6.1.84-99.169 | amzn 2023 | 1.0-0.amzn2023 |
| kernel-modules-extra | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-modules-extra-common | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-tools | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 6.1.84-99.169.amzn2023 |
| kernel-tools-devel | amzn 2023 | 6.1.84-99.169.amzn2023 |
| perf | amzn 2023 | 6.1.84-99.169.amzn2023 |
| perf-debuginfo | amzn 2023 | 6.1.84-99.169.amzn2023 |
| python3-perf | amzn 2023 | 6.1.84-99.169.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 6.1.84-99.169.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2024-36031 | dtb-aarch64: Security update for the Linux Kernel | 9.8 | 0.0075 | None reported |
| High | CVE-2024-26584 | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0075 | None reported |
| High | CVE-2024-26880 | kernel-debug: dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] | 7.8 | 0.0072 | None reported |
| High | CVE-2024-26882 | dtb-aarch64: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034). | 7.8 | 0.0070 | None reported |
| High | CVE-2024-26864 | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in __inet_hash_connect() | 7.8 | 0.0061 | None reported |
| High | CVE-2024-26585 | bpftool: tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 | 7.0 | 0.0059 | None reported |
| High | CVE-2024-23307 | kernel: md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] | 7.8 | 0.0059 | None reported |
| High | CVE-2024-26898 | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0031 | None reported |
| High | CVE-2024-26976 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU... | 7.8 | 0.0026 | None reported |
| High | CVE-2024-27065 | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.8 | 0.0026 | None reported |
| High | CVE-2024-26894 | kernel-core: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] | 7.8 | 0.0025 | None reported |
| High | CVE-2024-26883 | dtb-aarch64: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035). | 7.8 | 0.0025 | None reported |
| High | CVE-2024-26906 | python3-perf: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() | 7.0 | 0.0025 | None reported |
| High | CVE-2024-26958 | kernel-debug-core: Important: kernel security update | 7.8 | 0.0025 | None reported |
| High | CVE-2024-26950 | linux: In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx in... | 7.8 | 0.0024 | None reported |
| High | CVE-2024-35791 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | None reported |
| High | CVE-2024-26951 | dtb-aarch64: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660). | 7.8 | 0.0023 | None reported |
| High | CVE-2024-26865 | linux: In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_tim... | 7.8 | 0.0023 | None reported |
| High | CVE-2024-26810 | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask o... | 7.8 | 0.0020 | None reported |
| High | CVE-2024-35809 | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0020 | None reported |
| High | CVE-2024-26934 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 | None reported |
| High | CVE-2024-25742 | kernel-tools: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate) | 8.0 | 0.0018 | None reported |
| High | CVE-2024-26960 | linux: In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache()... | 7.0 | 0.0018 | None reported |
| High | CVE-2024-26933 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 | None reported |
| High | CVE-2023-53151 | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0012 | None reported |
Showing 1 to 25 of 64
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.