🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-117 Related CVEs: CVE-2023-1078 CVE-2023-26545 CVE-2023-0179 CVE-2022-3623 CVE-2022-4378 Upstream summary: The upstream bug report describes this issue as follows: A flaw found in the Linux Kernel in RDS (Reliable Datagram […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-121 Related CVEs: CVE-2023-1077 CVE-2023-28466 CVE-2023-1078 CVE-2023-26545 CVE-2023-0179 Upstream summary: kernel: Type confusion in pick_next_rt_entity(), which can result in memory corruption. (CVE-2023-1077) do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2697 Related CVEs: CVE-2024-45321 CVE-2020-16154 Upstream summary: The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers. (CVE-2024-45321) Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-848 Related CVEs: CVE-2024-56732 CVE-2021-45931 CVE-2022-33068 CVE-2023-25193 Upstream summary: HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-693 Related CVEs: CVE-2024-29038 CVE-2024-29039 Upstream summary: tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038) tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039) Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-275 Related CVEs: CVE-2023-37732 CVE-2021-33454 CVE-2021-33459 Upstream summary: Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2023-024 Related CVEs: CVE-2023-42752 CVE-2023-45871 CVE-2023-4623 CVE-2023-4921 CVE-2023-5090 CVE-2023-5197 CVE-2023-5717 Upstream summary: An integer overflow in kmalloc_reserve() in the Linux kernel may allow a local user to crash the system, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2024-032 Related CVEs: CVE-2024-41090 CVE-2024-41091 Upstream summary: kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-190 Related CVEs: CVE-2024-41087 CVE-2022-48666 CVE-2024-41090 CVE-2024-41091 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error (CVE-2024-41087) Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-055 Related CVEs: CVE-2024-53870 CVE-2024-53871 CVE-2024-53875 Upstream summary: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by […]
