Amazon Linux AMI: CVE-2023-7192: Security patch for kernel (ALAS-2023-1701)

Amazon Linux AMI: CVE-2023-7192: Security patch for kernel (ALAS-2023-1701)

Severity

4

CVSS

(AV:L/AC:L/Au:M/C:N/I:N/A:C)

Published

03/17/2023

Created

01/25/2024

Added

01/23/2024

Modified

01/28/2025

Description

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

Solution(s)

• amazon-linux-upgrade-kernel

References

• ALAS-2023-1701
• CVE-2023-7192