vulnerability

Amazon Linux AMI 2: CVE-2023-52628: Security patch for kernel, kernel-livepatch-4.14.336-257.562, kernel-livepatch-4.14.336-257.566, kernel-livepatch-4.14.336-257.568, kernel-livepatch-4.14.343-259.562, kernel-livepatch-4.14.343-260.564 (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:N/A:C)

Published

Mar 28, 2024

Added

Apr 26, 2024

Modified

May 20, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftables: exthdr: fix 4-byte stack OOB write

If priv->len is a multiple of 4, then dst[len / 4] can write past
the destination array which leads to stack corruption.

This construct is necessary to clean the remainder of the register
in case ->len is NOT a multiple of the register size, so make it
conditional just like nft_payload.c does.

The bug was added in 4.1 cycle and then copied/inherited when
tcp/sctp and ip option support was added.

Bug reported by Zero Day Initiative project (ZDI-CAN-21950,
ZDI-CAN-21951, ZDI-CAN-21961).

Solutions

amazon-linux-ami-2-upgrade-bpftoolamazon-linux-ami-2-upgrade-bpftool-debuginfoamazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-336-257-562amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-336-257-562-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-336-257-566amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-336-257-566-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-336-257-568amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-336-257-568-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-343-259-562amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-343-259-562-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-343-260-564amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-343-260-564-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-343-261-564amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-198-187-748amazon-linux-ami-2-upgrade-kernel-livepatch-5-15-133-86-144amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report