# ALAS2023-2025-1227: Security update for 22 packages ALAS2023-2025-1227, released October 27, 2025, fixes 18 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2025-1227 - Platform: Linux - Released: Oct 27, 2025 - Priority: High (Closes CVE-2025-40300, high severity) - CVEs: 18, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-1227.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel-livepatch-6.12.48-67.114](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.48-67.114.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.48-67.114.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-40300](https://patchblox.com/security/data/cve/CVE-2025-40300.md) | High | x86/vmscape: Add conditional IBPB mitigation | 7.3 | 0.0038 | | | [CVE-2025-39880](https://patchblox.com/security/data/cve/CVE-2025-39880.md) | High | libceph: fix invalid accesses to ceph_connection_v1_info | 7.8 | 0.0033 | | | [CVE-2025-38248](https://patchblox.com/security/data/cve/CVE-2025-38248.md) | High | bridge: mcast: Fix use-after-free during router port configuration | 7.8 | 0.0030 | | | [CVE-2025-39677](https://patchblox.com/security/data/cve/CVE-2025-39677.md) | High | net/sched: Fix backlog accounting in qdisc_dequeue_internal | 7.0 | 0.0021 | | | [CVE-2025-39913](https://patchblox.com/security/data/cve/CVE-2025-39913.md) | High | tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. | 7.8 | 0.0019 | | | [CVE-2025-39914](https://patchblox.com/security/data/cve/CVE-2025-39914.md) | High | tracing: Silence warning when chunk allocation fails in trace_pid_write | 7.0 | 0.0017 | | | [CVE-2025-39883](https://patchblox.com/security/data/cve/CVE-2025-39883.md) | High | mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory | 7.6 | 0.0016 | | | [CVE-2025-39877](https://patchblox.com/security/data/cve/CVE-2025-39877.md) | High | mm/damon/sysfs: fix use-after-free in state_show() | 7.8 | 0.0015 | | | [CVE-2025-39881](https://patchblox.com/security/data/cve/CVE-2025-39881.md) | High | kernfs: Fix UAF in polling when open file is released | 7.8 | 0.0015 | | | [CVE-2025-39917](https://patchblox.com/security/data/cve/CVE-2025-39917.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpf_crypt... | 7.8 | 0.0015 | | | [CVE-2025-39830](https://patchblox.com/security/data/cve/CVE-2025-39830.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_pool_buddy... | 5.5 | 0.0019 | | | [CVE-2025-39927](https://patchblox.com/security/data/cve/CVE-2025-39927.md) | Routine | ceph: fix race condition validating r_parent before applying state | 6.4 | 0.0015 | | | [CVE-2025-39886](https://patchblox.com/security/data/cve/CVE-2025-39886.md) | Routine | bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() | 5.5 | 0.0015 | | | [CVE-2025-39909](https://patchblox.com/security/data/cve/CVE-2025-39909.md) | Routine | mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() | 5.5 | 0.0015 | | | [CVE-2025-39916](https://patchblox.com/security/data/cve/CVE-2025-39916.md) | Routine | mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() | 5.5 | 0.0015 | | | [CVE-2025-39926](https://patchblox.com/security/data/cve/CVE-2025-39926.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genl_bind() invoking bind() after... | 5.5 | 0.0015 | | | [CVE-2025-39912](https://patchblox.com/security/data/cve/CVE-2025-39912.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing page... | 5.5 | 0.0015 | | | [CVE-2025-39884](https://patchblox.com/security/data/cve/CVE-2025-39884.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by i... | 5.5 | 0.0011 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.