Critical Vulnerabilities in Linux AWS and Oracle Packages: Denial of Service Risks
Summary
USN-6819-2: linux-aws, linux-oracle vulnerabilities. Affects linux-aws versions < 6.5.0-1021.21. Fixed in 6.5.0-1021.21. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux AWS and Oracle packages are essential components of the Ubuntu operating system, providing necessary kernel functionalities for cloud and enterprise environments. These packages facilitate hardware interactions, system management, and performance optimizations. However, they are susceptible to several vulnerabilities that could lead to system crashes and potential exploitation by attackers.
Vulnerability Detail
Recent discoveries have revealed multiple vulnerabilities within the Linux kernel, specifically affecting the NVMe-oF/TCP subsystem and the RDS Protocol implementation. These vulnerabilities can lead to null pointer dereferences and out-of-bounds reads, allowing remote attackers to cause denial of service (system crashes). The vulnerabilities are identified by CVE-2023-6356, CVE-2023-6535, CVE-2023-6536, and CVE-2024-23849, among others. The issues stem from improper data validation and race conditions within the kernel's subsystems.
How To Fix
Minimum fixed version
6.5.0-1021.21
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linux-awsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider disabling the affected subsystems or limiting access to them until the packages can be updated. This can help mitigate the risk of exploitation while waiting for a complete fix.
Conclusion
The vulnerabilities discovered in the Linux AWS and Oracle packages pose serious risks to system stability and security. It is essential for users to update their packages promptly to the patched versions to mitigate these risks. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for vulnerabilities.
See every vulnerability recorded for linux-aws →
FAQ
The main vulnerabilities include null pointer dereferences and out-of-bounds reads that can lead to denial of service.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
If immediate updates are not possible, consider disabling the affected subsystems or restricting access to mitigate risks.
While there are no public exploits reported yet, the vulnerabilities pose significant risks that could be exploited by attackers.
Regularly check for updates and vulnerabilities, ideally on a weekly basis, to ensure your system remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for linux-aws.
