Amazon Linux 2023 Security Advisory: ALAS2023LIVEPATCH-2024-030
Advisory Released Date: 2025-02-05
Advisory Updated Date: 2025-02-05
Severity:
Important
Issue Overview:
kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
Affected Packages:
kernel-livepatch-6.1.97-104.177
Issue Correction:
Run dnf update kernel-livepatch-6.1.97-104.177 --releasever 2023.5.20240903 to update your system.
New Packages:
aarch64:
kernel-livepatch-6.1.97-104.177-1.0-1.amzn2023.aarch64
src:
kernel-livepatch-6.1.97-104.177-1.0-1.amzn2023.src
x86_64:
kernel-livepatch-6.1.97-104.177-1.0-1.amzn2023.x86_64