{
  "fix": "ALAS2023-2025-1144",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1144",
  "summary": "ALAS2023-2025-1144, released August 8, 2025, fixes 34 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2025-08-08T02:59:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-38488, high severity",
  "supported": true,
  "cveCount": 34,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00772,
  "maxCvss": 8.2,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1144.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.147-172.266",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.147-172.266",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.147-172.266.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-38488",
      "url": "https://patchblox.com/security/cve/CVE-2025-38488",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_0: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues\n\nThe following security...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00772,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38471",
      "url": "https://patchblox.com/security/cve/CVE-2025-38471",
      "title": "tls: always refresh the queue when reading sock",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38472",
      "url": "https://patchblox.com/security/cve/CVE-2025-38472",
      "title": "netfilter: nf_conntrack: fix crash due to removal of uninitialised entry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38527",
      "url": "https://patchblox.com/security/cve/CVE-2025-38527",
      "title": "smb: client: fix use-after-free in cifs_oplock_break",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00455,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38476",
      "url": "https://patchblox.com/security/cve/CVE-2025-38476",
      "title": "rpl: Fix use-after-free in rpl_do_srh_inline().",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38495",
      "url": "https://patchblox.com/security/cve/CVE-2025-38495",
      "title": "HID: core: ensure the allocated report buffer can contain the reserved report ID",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38248",
      "url": "https://patchblox.com/security/cve/CVE-2025-38248",
      "title": "bridge: mcast: Fix use-after-free during router port configuration",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38494",
      "url": "https://patchblox.com/security/cve/CVE-2025-38494",
      "title": "HID: core: do not bypass hid_hw_raw_request",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0026,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38244",
      "url": "https://patchblox.com/security/cve/CVE-2025-38244",
      "title": "smb: client: fix potential deadlock when reconnecting channels",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38466",
      "url": "https://patchblox.com/security/cve/CVE-2025-38466",
      "title": "perf: Revert to requiring CAP_SYS_ADMIN for uprobes",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38465",
      "url": "https://patchblox.com/security/cve/CVE-2025-38465",
      "title": "netlink: Fix wraparounds of sk-\u003Esk_rmem_alloc.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38445",
      "url": "https://patchblox.com/security/cve/CVE-2025-38445",
      "title": "md/raid1: Fix stack memory use after return in raid1_reshape",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38396",
      "url": "https://patchblox.com/security/cve/CVE-2025-38396",
      "title": "fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38468",
      "url": "https://patchblox.com/security/cve/CVE-2025-38468",
      "title": "net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38457",
      "url": "https://patchblox.com/security/cve/CVE-2025-38457",
      "title": "net/sched: Abort __tc_modify_qdisc if parent class does not exist",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38499",
      "url": "https://patchblox.com/security/cve/CVE-2025-38499",
      "title": "clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38443",
      "url": "https://patchblox.com/security/cve/CVE-2025-38443",
      "title": "nbd: fix uaf in nbd_genl_connect() error path",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38550",
      "url": "https://patchblox.com/security/cve/CVE-2025-38550",
      "title": "ipv6: mcast: Delay put pmc-\u003Eidev in mld_del_delrec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38461",
      "url": "https://patchblox.com/security/cve/CVE-2025-38461",
      "title": "vsock: Fix transport_* TOCTOU",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38477",
      "url": "https://patchblox.com/security/cve/CVE-2025-38477",
      "title": "net/sched: sch_qfq: Fix race condition on qfq_aggregate",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38462",
      "url": "https://patchblox.com/security/cve/CVE-2025-38462",
      "title": "vsock: Fix transport_{g2h,h2g} TOCTOU",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38067",
      "url": "https://patchblox.com/security/cve/CVE-2025-38067",
      "title": "rseq: Fix segfault on registration when rseq_cs is non-zero",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0058,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38064",
      "url": "https://patchblox.com/security/cve/CVE-2025-38064",
      "title": "virtio: break and reset virtio devices on device_shutdown()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.7,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38470",
      "url": "https://patchblox.com/security/cve/CVE-2025-38470",
      "title": "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38441",
      "url": "https://patchblox.com/security/cve/CVE-2025-38441",
      "title": "kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38539",
      "url": "https://patchblox.com/security/cve/CVE-2025-38539",
      "title": "tracing: Add down_write(trace_event_sem) when adding trace event",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38455",
      "url": "https://patchblox.com/security/cve/CVE-2025-38455",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38364",
      "url": "https://patchblox.com/security/cve/CVE-2025-38364",
      "title": "maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38528",
      "url": "https://patchblox.com/security/cve/CVE-2025-38528",
      "title": "bpf: Reject %p% format string in bprintf-like helpers",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38540",
      "url": "https://patchblox.com/security/cve/CVE-2025-38540",
      "title": "HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38444",
      "url": "https://patchblox.com/security/cve/CVE-2025-38444",
      "title": "raid10: cleanup memleak at raid10_make_request",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38451",
      "url": "https://patchblox.com/security/cve/CVE-2025-38451",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md/md-bitmap: fix GPF in bitmap_get_stats()  The...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38503",
      "url": "https://patchblox.com/security/cve/CVE-2025-38503",
      "title": "btrfs: fix assertion when building free space tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37920",
      "url": "https://patchblox.com/security/cve/CVE-2025-37920",
      "title": "xsk: Fix race condition in AF_XDP generic RX path",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}