Amazon Linux 2

Amazon Linux 2 — nasm — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — nasm — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2029 Related CVEs: CVE-2022-44370 CVE-2020-18780 CVE-2020-21528 CVE-2022-46457 Upstream summary: NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 (CVE-2022-44370) Table of contents Symptom & […]

Read more
Amazon Linux 2 — jasper — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — jasper — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2018 Related CVEs: CVE-2020-27828 CVE-2021-26926 CVE-2021-26927 CVE-2021-3272 CVE-2021-3443 CVE-2021-3467 CVE-2016-9396 CVE-2017-1000050 Upstream summary: A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft […]

Read more
Amazon Linux 2 — liblouis — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — liblouis — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2013 Related CVEs: CVE-2023-26767 CVE-2023-26768 CVE-2023-26769 CVE-2018-11440 CVE-2018-11577 CVE-2018-11684 CVE-2018-11685 CVE-2018-12085 Upstream summary: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.162-141.675 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.162-141.675 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-121 Related CVEs: CVE-2023-1077 CVE-2023-28466 CVE-2023-1078 CVE-2023-26545 CVE-2023-0179 Upstream summary: kernel: Type confusion in pick_next_rt_entity(), which can result in memory corruption. (CVE-2023-1077) do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.165-143.735 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.165-143.735 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-120 Related CVEs: CVE-2023-1077 CVE-2023-28466 CVE-2023-1078 CVE-2023-26545 Upstream summary: kernel: Type confusion in pick_next_rt_entity(), which can result in memory corruption. (CVE-2023-1077) do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.301-225.528 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.301-225.528 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-111 Related CVEs: CVE-2023-26545 Upstream summary: In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.304-226.531 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.304-226.531 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-113 Related CVEs: CVE-2023-26545 Upstream summary: In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.305-227.531 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.305-227.531 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-112 Related CVEs: CVE-2023-26545 Upstream summary: In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.157-139.675 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.157-139.675 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-117 Related CVEs: CVE-2023-1078 CVE-2023-26545 CVE-2023-0179 CVE-2022-3623 CVE-2022-4378 Upstream summary: The upstream bug report describes this issue as follows: A flaw found in the Linux Kernel in RDS (Reliable Datagram […]

Read more
Amazon Linux 2 — systemd — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — systemd — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2004 Related CVEs: CVE-2023-26604 CVE-2019-3842 CVE-2020-13529 CVE-2020-13776 CVE-2022-2526 CVE-2019-6454 CVE-2018-15688 CVE-2018-16864  +9 more Upstream summary: systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., […]

Read more
CHAT