{
  "fix": "ALAS2023-2025-1130",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130",
  "summary": "ALAS2023-2025-1130, released July 29, 2025, fixes 36 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2025-07-29T23:15:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-38399, high severity",
  "supported": true,
  "cveCount": 36,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00506,
  "maxCvss": 7.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1130.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.37-61.105",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.37-61.105",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.37-61.105.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-38399",
      "url": "https://patchblox.com/security/cve/CVE-2025-38399",
      "title": "scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38139",
      "url": "https://patchblox.com/security/cve/CVE-2025-38139",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix oops in write-retry from mis-resettin...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38264",
      "url": "https://patchblox.com/security/cve/CVE-2025-38264",
      "title": "nvme-tcp: sanitize request list handling",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38379",
      "url": "https://patchblox.com/security/cve/CVE-2025-38379",
      "title": "smb: client: fix warning when reconnecting channel",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38523",
      "url": "https://patchblox.com/security/cve/CVE-2025-38523",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncifs: Fix the smbd_response slab to allow usercop...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.3,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38350",
      "url": "https://patchblox.com/security/cve/CVE-2025-38350",
      "title": "net/sched: Always pass notifications when child class becomes empty",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38236",
      "url": "https://patchblox.com/security/cve/CVE-2025-38236",
      "title": "af_unix: Don\u0027t leave consecutive consumed OOB skbs.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38244",
      "url": "https://patchblox.com/security/cve/CVE-2025-38244",
      "title": "smb: client: fix potential deadlock when reconnecting channels",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38279",
      "url": "https://patchblox.com/security/cve/CVE-2025-38279",
      "title": "bpf: Do not include stack ptr register in precision backtracking bookkeeping",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38372",
      "url": "https://patchblox.com/security/cve/CVE-2025-38372",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mlx5: Fix unsafe xarray access in implicit...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38403",
      "url": "https://patchblox.com/security/cve/CVE-2025-38403",
      "title": "vsock/vmci: Clear the vmci transport packet properly when initializing it",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38389",
      "url": "https://patchblox.com/security/cve/CVE-2025-38389",
      "title": "drm/i915/gt: Fix timeline left held on VMA alloc error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38386",
      "url": "https://patchblox.com/security/cve/CVE-2025-38386",
      "title": "ACPICA: Refuse to evaluate a method if arguments are missing",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38375",
      "url": "https://patchblox.com/security/cve/CVE-2025-38375",
      "title": "virtio-net: ensure the received length does not exceed allocated size",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38396",
      "url": "https://patchblox.com/security/cve/CVE-2025-38396",
      "title": "fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38413",
      "url": "https://patchblox.com/security/cve/CVE-2025-38413",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  virtio-net: xsk: rx: fix the frame\u0027s length chec...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40216",
      "url": "https://patchblox.com/security/cve/CVE-2025-40216",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/rsrc: don\u0027t rely on user vaddr alignmen...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38383",
      "url": "https://patchblox.com/security/cve/CVE-2025-38383",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38373",
      "url": "https://patchblox.com/security/cve/CVE-2025-38373",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38405",
      "url": "https://patchblox.com/security/cve/CVE-2025-38405",
      "title": "kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00429,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38393",
      "url": "https://patchblox.com/security/cve/CVE-2025-38393",
      "title": "NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38365",
      "url": "https://patchblox.com/security/cve/CVE-2025-38365",
      "title": "btrfs: fix a race between renames and directory logging",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00356,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38064",
      "url": "https://patchblox.com/security/cve/CVE-2025-38064",
      "title": "virtio: break and reset virtio devices on device_shutdown()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.7,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38400",
      "url": "https://patchblox.com/security/cve/CVE-2025-38400",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "Routine",
      "severity": "low",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38387",
      "url": "https://patchblox.com/security/cve/CVE-2025-38387",
      "title": "RDMA/mlx5: Initialize obj_event-\u003Eobj_sub_list before xa_insert",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38382",
      "url": "https://patchblox.com/security/cve/CVE-2025-38382",
      "title": "btrfs: fix iteration of extrefs during log replay",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38364",
      "url": "https://patchblox.com/security/cve/CVE-2025-38364",
      "title": "maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38390",
      "url": "https://patchblox.com/security/cve/CVE-2025-38390",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_ffa: Fix memory leak by freeing no...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38262",
      "url": "https://patchblox.com/security/cve/CVE-2025-38262",
      "title": "tty: serial: uartlite: register uart driver in init",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38263",
      "url": "https://patchblox.com/security/cve/CVE-2025-38263",
      "title": "bcache: fix NULL pointer in cache_set_flush()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38255",
      "url": "https://patchblox.com/security/cve/CVE-2025-38255",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38258",
      "url": "https://patchblox.com/security/cve/CVE-2025-38258",
      "title": "mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-\u003Ememcg_path on write",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38260",
      "url": "https://patchblox.com/security/cve/CVE-2025-38260",
      "title": "btrfs: handle csum tree error with rescue=ibadroots correctly",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38256",
      "url": "https://patchblox.com/security/cve/CVE-2025-38256",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38388",
      "url": "https://patchblox.com/security/cve/CVE-2025-38388",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_ffa: Replace mutex with rwlock to...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38242",
      "url": "https://patchblox.com/security/cve/CVE-2025-38242",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: userfaultfd: fix race of userfaultfd_move an...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}