vulnerability
Amazon Linux AMI 2: CVE-2023-3609: Security patch for kernel, kernel-livepatch-4.14.318-240.529, kernel-livepatch-4.14.318-241.531, kernel-livepatch-4.14.320-242.534, kernel-livepatch-5.10.179-171.711, kernel-livepatch-5.10.184-174.730, kernel-livepatch-5.10.184-175.731, kernel-livepatch-5.10.184-175.749 (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:S/C:C/I:C/A:C) | 2023-07-21 | 2023-08-08 | 2025-02-20 |
Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
2023-07-21
Added
2023-08-08
Modified
2025-02-20
Description
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
Solution(s)
amazon-linux-ami-2-upgrade-bpftoolamazon-linux-ami-2-upgrade-bpftool-debuginfoamazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-318-240-529amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-318-240-529-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-318-241-531amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-318-241-531-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-320-242-534amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-320-242-534-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-320-243-544amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-179-171-711amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-179-171-711-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-5-10-184-174-730amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-184-174-730-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-5-10-184-175-731amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-184-175-731-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-5-10-184-175-749amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-184-175-749-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-5-10-186-179-751amazon-linux-ami-2-upgrade-kernel-livepatch-5-15-120-74-144amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo
References
- AMAZON-AL2/ALAS-2023-2179
- AMAZON-AL2/ALASKERNEL-5.10-2023-038
- AMAZON-AL2/ALASKERNEL-5.15-2023-024
- AMAZON-AL2/ALASKERNEL-5.4-2023-049
- AMAZON-AL2/ALASLIVEPATCH-2023-142
- AMAZON-AL2/ALASLIVEPATCH-2023-143
- AMAZON-AL2/ALASLIVEPATCH-2023-144
- AMAZON-AL2/ALASLIVEPATCH-2023-145
- AMAZON-AL2/ALASLIVEPATCH-2023-146
- AMAZON-AL2/ALASLIVEPATCH-2023-147
- AMAZON-AL2/ALASLIVEPATCH-2023-148
- CVE-2023-3609
- https://attackerkb.com/topics/CVE-2023-3609
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.