Amazon Linux AMI update for kernel

1) Resource management error

EUVDB-ID: #VU51587

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-26930

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources when processing service requests to the PV backend within drivers/block/xen-blkback/blkback.c driver in Xen. A local user on the guest OS can perform a denial of service (DoS) attack.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Allocation of resources without limits or throttling

EUVDB-ID: #VU92418

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-26931

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to allocation of resources without limits or throttling error within the scsiback_gnttab_data_map_batch() function in drivers/xen/xen-scsiback.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Buffer overflow

EUVDB-ID: #VU93670

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-26932

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the gntdev_map_grant_pages() function in drivers/xen/gntdev.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Information disclosure

EUVDB-ID: #VU51453

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-27363

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to the show_transport_handle() shows iSCSI transport handle to non-root users. A local user can gain unauthorized access to sensitive information and use it along with another vulnerability, such as #VU51452, to escalate privileges on the system.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU51452

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-27364

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to iscsi_if_recv_msg() allows non-root users to connect and send commands to the Linux kernel. A local user can escalate privileges on the system.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Buffer overflow

EUVDB-ID: #VU51451

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-27365

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error when processing Netlink messages in Linux kernel through 5.11.3, as certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. A local unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message, trigger memory corruption and execute arbitrary code on the system with elevated privileges.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Allocation of resources without limits or throttling

EUVDB-ID: #VU92417

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28038

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

Exploit availability: No

Description

The vulnerability allows a local user to a crash the entire system.

The vulnerability exists due to allocation of resources without limits or throttling error within the xenvif_tx_action() function in drivers/net/xen-netback/netback.c. A local user can a crash the entire system.

Mitigation

Update the affected packages:

i686:
    kernel-tools-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-common-i686-4.14.225-121.357.amzn1.i686
    kernel-debuginfo-4.14.225-121.357.amzn1.i686
    perf-4.14.225-121.357.amzn1.i686
    kernel-devel-4.14.225-121.357.amzn1.i686
    kernel-4.14.225-121.357.amzn1.i686
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-tools-devel-4.14.225-121.357.amzn1.i686
    perf-debuginfo-4.14.225-121.357.amzn1.i686
    kernel-headers-4.14.225-121.357.amzn1.i686

src:
    kernel-4.14.225-121.357.amzn1.src

x86_64:
    perf-debuginfo-4.14.225-121.357.amzn1.x86_64
    perf-4.14.225-121.357.amzn1.x86_64
    kernel-devel-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-common-x86_64-4.14.225-121.357.amzn1.x86_64
    kernel-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-headers-4.14.225-121.357.amzn1.x86_64
    kernel-tools-debuginfo-4.14.225-121.357.amzn1.x86_64
    kernel-tools-devel-4.14.225-121.357.amzn1.x86_64
    kernel-tools-4.14.225-121.357.amzn1.x86_64
    kernel-4.14.225-121.357.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

kernel: before 4.14.225-121.357

CPE2.3

External links

https://alas.aws.amazon.com/ALAS-2021-1487.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Risk	Medium
Patch available	YES
Number of vulnerabilities	7
CVE-ID	CVE-2021-26930 CVE-2021-26931 CVE-2021-26932 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038
CWE-ID	CWE-399 CWE-770 CWE-119 CWE-200 CWE-264
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Amazon Linux AMI Operating systems & Components / Operating system kernel Operating systems & Components / Operating system package or component
Vendor	Amazon Web Services