p PatchFirst

PatchFirst · Latest vulnerabilities

linux-aws vulnerabilities · Page 146

Vulnerabilities published for linux-aws in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 3435

  1. CVE-2023-3776

    High · CVSS 7.8EPSS 0.51%Public exploitFix available

    Use-after-free in Linux kernel's net/sched: cls_fw component

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.

    linux-awsOperating systems
    • Update to 5.4.0-1108.116
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2023-3611

    High · CVSS 7.8EPSS 0.29%Fix available

    Out-of-bounds write in Linux kernel's net/sched: sch_qfq component

    An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

    linux-awsOperating systems
    • Update to 5.4.0-1108.116
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2023-3609

    High · CVSS 7.8EPSS 0.49%Fix available

    Use-after-free in Linux kernel's net/sched: cls_u32 component

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

    linux-awsOperating systems
    • Update to 5.4.0-1108.116
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2023-1206

    High · CVSS 8.7EPSS 0.63%Public exploitFix available

    CVE-2023-1206

    A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

    linux-awsOperating systems
    • Update to 5.4.0-1111.120
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2023-3390

    High · CVSS 7.8EPSS 0.91%Fix available

    Use-after-free in Linux kernel's netfilter subsystem

    A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97

    linux-awsOperating systems
    • Update to 5.4.0-1106.114
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2023-3090

    High · CVSS 7.8EPSS 0.48%Fix available

    Out-of-bounds write in Linux kernel's ipvlan network driver

    A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

    linux-awsOperating systems
    • Update to 5.4.0-1106.114
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2023-3212

    Medium · CVSS 4.4EPSS 0.28%Fix available

    CVE-2023-3212

    A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

    linux-awsOperating systems
    • Update to 5.4.0-1111.120
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2023-3220

    Medium · CVSS 5.5EPSS 0.22%Fix available

    CVE-2023-3220

    An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.

    linux-awsOperating systems
    • Update to 5.4.0-1104.112
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  20. CVE-2023-35788

    High · CVSS 7.8EPSS 0.52%Fix available

    CVE-2023-35788

    An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

    linux-awsOperating systems
    • Update to 5.4.0-1105.113
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →