Linux · Amazon Linux · Security advisory · October 24, 2024

ALAS2023-2024-744: Security update for 21 packages

ALAS2023-2024-744, released October 24, 2024, fixes 29 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
29
None rated Critical
Exploited
0
None reported
Highest CVSS
8.0
Base score, 0 to 10
Highest EPSS
0.0059
48th percentile

Priority of the 29 CVEs

Patch now 0 Urgent 0 High 12 Routine 17

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20236.1.111-120.187.amzn2023
bpftool-debuginfoamzn 20236.1.111-120.187.amzn2023
kernelamzn 20236.1.111-120.187.amzn2023
kernel-debuginfoamzn 20236.1.111-120.187.amzn2023
kernel-debuginfo-common-aarch64amzn 20236.1.111-120.187.amzn2023
kernel-debuginfo-common-x86_64amzn 20236.1.111-120.187.amzn2023
kernel-develamzn 20236.1.111-120.187.amzn2023
kernel-headersamzn 20236.1.111-120.187.amzn2023
kernel-libbpfamzn 20236.1.111-120.187.amzn2023
kernel-libbpf-develamzn 20236.1.111-120.187.amzn2023
kernel-libbpf-staticamzn 20236.1.111-120.187.amzn2023
kernel-livepatch-6.1.111-120.187amzn 20231.0-0.amzn2023
kernel-modules-extraamzn 20236.1.111-120.187.amzn2023
kernel-modules-extra-commonamzn 20236.1.111-120.187.amzn2023
kernel-toolsamzn 20236.1.111-120.187.amzn2023
kernel-tools-debuginfoamzn 20236.1.111-120.187.amzn2023
kernel-tools-develamzn 20236.1.111-120.187.amzn2023
perfamzn 20236.1.111-120.187.amzn2023
perf-debuginfoamzn 20236.1.111-120.187.amzn2023
python3-perfamzn 20236.1.111-120.187.amzn2023
python3-perf-debuginfoamzn 20236.1.111-120.187.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-46858 kernel-64kb: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).7.0 0.0059 None reported
High CVE-2024-46865 kernel-64kb: Security update for the Linux Kernel7.1 0.0055 None reported
High CVE-2024-46713 kernel-64kb: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).7.8 0.0030 None reported
High CVE-2024-46800 dtb-aarch64: sch/netem: fix use after free in netem_dequeue (bsc#1230827).7.8 0.0030 None reported
High CVE-2024-46744 dtb-aarch64: Security update for the Linux Kernel7.8 0.0030 None reported
High CVE-2024-46743 dtb-aarch64: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).7.1 0.0030 None reported
High CVE-2024-46738 dtb-aarch64: Security update for the Linux Kernel7.8 0.0028 None reported
High CVE-2024-46828 dtb-aarch64: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).7.8 0.0025 None reported
High CVE-2024-46826 dtb-aarch64: ELF: fix kernel.randomize_va_space double read (bsc#1231115).8.0 0.0025 None reported
High CVE-2024-46830 kernel-64kb: Security update for the Linux Kernel7.8 0.0025 None reported
High CVE-2024-46782 kernel-64kb: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).7.8 0.0024 None reported
High CVE-2023-54247 kernel-64kb: Security update for the Linux Kerneln/a 0.0020 None reported
Routine CVE-2024-46855 kernel-64kb: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).5.5 0.0054 None reported
Routine CVE-2024-46745 dtb-aarch64: Security update for the Linux Kernel5.5 0.0029 None reported
Routine CVE-2024-46739 dtb-aarch64: Security update for the Linux Kernel5.5 0.0028 None reported
Routine CVE-2024-46840 kernel-64kb: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).5.5 0.0026 None reported
Routine CVE-2024-46777 dtb-aarch64: udf: Avoid excessive partition lengths (bsc#1230773).5.5 0.0025 None reported
Routine CVE-2024-46822 dtb-aarch64: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).5.5 0.0025 None reported
Routine CVE-2024-46752 dtb-aarch64: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794).5.5 0.0025 None reported
Routine CVE-2024-43892 dtb-aarch64: Security update for the Linux Kernel4.7 0.0025 None reported
Routine CVE-2024-47674 kernel-64kb: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).5.5 0.0025 None reported
Routine CVE-2024-46783 kernel-modules: kernel: tcp_bpf: fix return value of tcp_bpf_sendmsg()5.5 0.0023 None reported
Routine CVE-2024-46750 dtb-aarch64: Security update for the Linux Kernel5.5 0.0022 None reported
Routine CVE-2024-46848 kernel-64kb: Security update for the Linux Kernel5.5 0.0022 None reported
Routine CVE-2024-47665 kernel-64kb: Security update for the Linux Kernel5.5 0.0021 None reported
Showing 1 to 25 of 29 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.