SynopsisThe remote Amazon Linux 2 host is missing a security update.
DescriptionIn the Linux kernel af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free (UAF) in sockfs_setattr. A local attacker can use this flaw to escalate privileges and take control of the system.(CVE-2019-8912)
SolutionRun 'yum update kernel' to update your system.