AWS linux documentation change
Summary
Minor syntax fixes and added details about kernel 6.12 security features (user-space shadow stacks and memory sealing)
Security assessment
The change documents new security features (shadow stacks, memory sealing) but does not address a specific existing vulnerability. The security_issue_related flag is false as there's no evidence of patching a vulnerability.
Diff
diff --git a/linux/al2023/ug/kernel-update.md b/linux/al2023/ug/kernel-update.md index 5cf0ffc5b..95bfdbba9 100644 --- a//linux/al2023/ug/kernel-update.md +++ b//linux/al2023/ug/kernel-update.md @@ -26 +26 @@ AL2023 was originally released in March 2023 with kernel 6.1. -In April 2025, AL2023 added support for Linux kernel 6.12. This kernel added new features including EEVDF scheduling, FUSE passthrough I/O support, a new Futex API, and improvements in eBPF. Kernel 6.12 also allows userspace programs to secure themselve at runtime using user-space shadow stacks and memory sealing. +In April 2025, AL2023 added support for Linux kernel 6.12. This kernel added new features including EEVDF scheduling, FUSE passthrough I/O support, a new Futex API, and improvements in eBPF. Kernel 6.12 also allows a userspace program to secure itself at runtime using user-space shadow stacks and memory sealing. @@ -57 +57 @@ You can in-place upgrade a running AL2023 instance to kernel 6.12 with the follo - 2. Get the latest version of the `kernel6.12` package. + 2. Get the latest version of the `kernel6.12` package: @@ -61 +61 @@ You can in-place upgrade a running AL2023 instance to kernel 6.12 with the follo - 3. Make the new `kernel6.12` your default kernel. + 3. Make the new `kernel6.12` your default kernel: @@ -65 +65 @@ You can in-place upgrade a running AL2023 instance to kernel 6.12 with the follo - 4. Reboot your system. + 4. Reboot your system: @@ -69 +69 @@ You can in-place upgrade a running AL2023 instance to kernel 6.12 with the follo - 5. (Optional) Uninstall kernel 6.1 + 5. (Optional) Uninstall kernel 6.1: @@ -84 +84 @@ If at any point in time you need to downgrade back to kernel 6.1, use the follow - 2. Get the latest version of the `kernel` package. + 2. Get the latest version of the `kernel` package: @@ -88 +88 @@ If at any point in time you need to downgrade back to kernel 6.1, use the follow - 3. Make kernel 6.1 your default kernel. + 3. Make kernel 6.1 your default kernel: @@ -92 +92 @@ If at any point in time you need to downgrade back to kernel 6.1, use the follow - 4. Reboot your system. + 4. Reboot your system: @@ -96 +96 @@ If at any point in time you need to downgrade back to kernel 6.1, use the follow - 5. (Optional) Uninstall kernel 6.12 + 5. (Optional) Uninstall kernel 6.12: @@ -129 +129 @@ Please run: -`perf`'s features are tightly tied to the version of the kernel you are running. We provide packages `perf` for kernel 6.1 and `perf6.12` for kernel 6.12. If you have `perf` installed and would like to switch to the kernel 6.12 version, please execute +`perf`'s features are tightly tied to the version of the kernel you are running. We provide packages `perf` for kernel 6.1 and `perf6.12` for kernel 6.12. If you have `perf` installed and would like to switch to the kernel 6.12 version, please execute: