Amazon Linux 2 : kernel (ALAS-2018-1100)
Medium Nessus Plugin ID 118832
Synopsis
The remote Amazon Linux 2 host is missing a security update.
Description
An issue was discovered in the proc_pid_stack function in
fs/proc/base.c in the Linux kernel. An attacker with a local account
can trick the stack unwinder code to leak stack contents to userspace.
The fix allows only root to inspect the kernel stack of an arbitrary
task.(CVE-2018-17972)
A vulnerability was discovered in the Linux kernel that allows an
attacker to escalate privileges with using a 64-bit ARM architecture.
A local attacker with permission to create KVM-based virtual machines
can both panic the hypervisor by triggering an illegal exception
return (resulting in a DoS) and to redirect execution elsewhere within
the hypervisor with full register control, instead of causing a return
to the guest.(CVE-2018-18021)
Solution
Run 'yum update kernel' and reboot your instance to update your
system.