Lucene search
AmazonALAS2-2020-1405HistoryMar 23, 2020 - 4:25 p.m.
Important: kernel
2020-03-2316:25:00
alas.aws.amazon.com
23
Issue Overview:
A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested(=1) virtualization is enabled. In the instruction emulation, the L2 guest could trick the L0 hypervisor into accessing sensitive bits of the L1 hypervisor. An L2 guest could use this flaw to potentially access information of the L1 hypervisor. (CVE-2020-2732)
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty. (CVE-2020-8648)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel to update your system.
New Packages:
aarch64:
kernel-4.14.173-137.228.amzn2.aarch64
kernel-headers-4.14.173-137.228.amzn2.aarch64
kernel-debuginfo-common-aarch64-4.14.173-137.228.amzn2.aarch64
perf-4.14.173-137.228.amzn2.aarch64
perf-debuginfo-4.14.173-137.228.amzn2.aarch64
python-perf-4.14.173-137.228.amzn2.aarch64
python-perf-debuginfo-4.14.173-137.228.amzn2.aarch64
kernel-tools-4.14.173-137.228.amzn2.aarch64
kernel-tools-devel-4.14.173-137.228.amzn2.aarch64
kernel-tools-debuginfo-4.14.173-137.228.amzn2.aarch64
kernel-devel-4.14.173-137.228.amzn2.aarch64
kernel-debuginfo-4.14.173-137.228.amzn2.aarch64
i686:
kernel-headers-4.14.173-137.228.amzn2.i686
src:
kernel-4.14.173-137.228.amzn2.src
x86_64:
kernel-4.14.173-137.228.amzn2.x86_64
kernel-headers-4.14.173-137.228.amzn2.x86_64
kernel-debuginfo-common-x86_64-4.14.173-137.228.amzn2.x86_64
perf-4.14.173-137.228.amzn2.x86_64
perf-debuginfo-4.14.173-137.228.amzn2.x86_64
python-perf-4.14.173-137.228.amzn2.x86_64
python-perf-debuginfo-4.14.173-137.228.amzn2.x86_64
kernel-tools-4.14.173-137.228.amzn2.x86_64
kernel-tools-devel-4.14.173-137.228.amzn2.x86_64
kernel-tools-debuginfo-4.14.173-137.228.amzn2.x86_64
kernel-devel-4.14.173-137.228.amzn2.x86_64
kernel-debuginfo-4.14.173-137.228.amzn2.x86_64
kernel-livepatch-4.14.173-137.228-1.0-0.amzn2.x86_64
Additional References
Red Hat: CVE-2020-10942, CVE-2020-2732, CVE-2020-8648
Mitre: CVE-2020-10942, CVE-2020-2732, CVE-2020-8648
Related
nessus
nessus
Amazon Linux 2 : kernel (ALAS-2020-1405)
2020-03-26 00:00:00
Amazon Linux AMI : kernel (ALAS-2020-1360)
2020-04-24 00:00:00
SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:0688-1)
2020-03-16 00:00:00
amazon
amazon
Medium: kernel
2020-04-20 19:25:00
Important: kernel
2020-03-23 16:25:00
cve
cve
debian
debian
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DLA 2242-1] linux-4.9 security update
2020-06-10 10:48:38
osv
osv
linux - security update
2020-04-28 00:00:00
linux - security update
2020-06-09 00:00:00
linux-4.9 - security update
2020-06-09 00:00:00
nvd
nvd
redhatcve
redhatcve
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2020-11-05 03:09:58
Denial Of Service (DoS)
2020-11-05 03:09:53
Information Disclosure
2020-05-13 03:32:56
photon
photon
Important Photon OS Security Update - PHSA-2020-0221
2020-03-17 00:00:00
Important Photon OS Security Update - PHSA-2020-0073
2020-03-27 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0073
2020-03-27 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-10942 affecting package kernel 5.4.91-6
2021-03-03 03:44:27
CVE-2020-8648 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
f5
f5
K21458044 : Linux kernel vulnerability CVE-2020-10942
2022-06-02 00:00:00
K23641249 : KVM hypervisor vulnerability CVE-2020-2732
2020-04-10 00:00:00
debiancve
debiancve
prion
prion
Design/Logic Flaw
2020-03-24 22:15:00
Design/Logic Flaw
2020-04-08 22:15:00
Design/Logic Flaw
2020-02-06 01:15:00
ubuntucve
ubuntucve
openvas
openvas
Debian: Security Advisory (DSA-4667-1)
2020-04-30 00:00:00
Mageia: Security Advisory (MGASA-2020-0110)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4303-2)
2022-08-26 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-02-24 00:00:00
Unbreakable Enterprise kernel security update
2020-02-24 00:00:00
Unbreakable Enterprise kernel security update
2020-02-24 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerability
2020-02-29 16:42:35
Updated kernel-linus packages fix security vulnerabilities
2020-04-04 01:53:32
Updated kernel packages fix security vulnerabilities
2020-03-14 02:19:55
ubuntu
ubuntu
Linux kernel vulnerability
2020-03-17 00:00:00
Linux kernel (HWE) vulnerability
2020-03-17 00:00:00
Linux kernel vulnerabilities
2020-04-28 00:00:00
redhat
redhat
(RHSA-2021:3320) Important: kernel security update
2021-08-31 07:34:14
(RHSA-2020:2171) Important: kernel-rt security and bug fix update
2020-05-14 18:45:25
(RHSA-2020:2102) Important: kernel security and bug fix update
2020-05-12 13:42:43
archlinux
archlinux
[ASA-202003-6] linux: multiple issues
2020-03-08 00:00:00
cloudfoundry
cloudfoundry
USN-4345-1: Linux kernel vulnerabilities | Cloud Foundry
2020-05-14 00:00:00
USN-4302-1: Linux kernel vulnerabilities | Cloud Foundry
2020-04-23 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2021-06-14 18:52:13
suse
suse
Security update for the Linux Kernel (important)
2020-04-23 00:00:00
Security update for the Linux Kernel (important)
2020-03-13 00:00:00
virtuozzo
virtuozzo
ibm
ibm
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2020-03-26 23:13:28
threatpost
threatpost
Two Critical Android Bugs Open Door to RCE
2020-06-02 17:10:58