# ALAS2023-2025-1254: Security update for 22 packages

ALAS2023-2025-1254, released October 27, 2025, fixes 48 CVEs across 22 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-1254
- Platform: Linux
- Released: Oct 27, 2025
- Priority: Patch now (Closes CVE-2025-39964, exploited (CISA KEV))
- CVEs: 48, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-1254.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel-livepatch-6.12.53-69.119](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.53-69.119.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |
| [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.53-69.119.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-39964](https://patchblox.com/security/data/cve/CVE-2025-39964.md) | Patch now | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | CISA KEV |
| [CVE-2025-39975](https://patchblox.com/security/data/cve/CVE-2025-39975.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix wrong index reference in smb2_c... | 9.8 | 0.0047 |  |
| [CVE-2025-39967](https://patchblox.com/security/data/cve/CVE-2025-39967.md) | Urgent | fbcon: fix integer overflow in fbcon_do_set_font | 9.8 | 0.0017 |  |
| [CVE-2025-39946](https://patchblox.com/security/data/cve/CVE-2025-39946.md) | High | tls: make sure to abort the stream if headers are bogus | 7.0 | 0.1026 |  |
| [CVE-2025-40048](https://patchblox.com/security/data/cve/CVE-2025-40048.md) | High | uio_hv_generic: Let userspace take care of interrupt mask | 8.4 | 0.0064 |  |
| [CVE-2025-40129](https://patchblox.com/security/data/cve/CVE-2025-40129.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len... | 7.5 | 0.0057 |  |
| [CVE-2025-40057](https://patchblox.com/security/data/cve/CVE-2025-40057.md) | High | ptp: Add a upper bound on max_vclocks | 7.1 | 0.0025 |  |
| [CVE-2025-40009](https://patchblox.com/security/data/cve/CVE-2025-40009.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc/task_mmu: check p->vec_buf for NULL  Whe... | n/a | 0.0024 |  |
| [CVE-2025-39980](https://patchblox.com/security/data/cve/CVE-2025-39980.md) | High | nexthop: Forbid FDB status change while nexthop is in a group | 7.1 | 0.0023 |  |
| [CVE-2025-40035](https://patchblox.com/security/data/cve/CVE-2025-40035.md) | High | Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak | 7.1 | 0.0023 |  |
| [CVE-2025-40052](https://patchblox.com/security/data/cve/CVE-2025-40052.md) | High | smb: client: fix crypto buffers in non-linear memory | 7.1 | 0.0021 |  |
| [CVE-2025-40006](https://patchblox.com/security/data/cve/CVE-2025-40006.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix folio is still mapped when delet... | 7.8 | 0.0021 |  |
| [CVE-2025-39965](https://patchblox.com/security/data/cve/CVE-2025-39965.md) | High | xfrm: xfrm_alloc_spi shouldn't use 0 as SPI | 7.8 | 0.0020 |  |
| [CVE-2025-39992](https://patchblox.com/security/data/cve/CVE-2025-39992.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm: swap: check for stable address space before... | n/a | 0.0020 |  |
| [CVE-2025-39990](https://patchblox.com/security/data/cve/CVE-2025-39990.md) | High | bpf: Check the helper function is valid in get_helper_proto | 7.8 | 0.0020 |  |
| [CVE-2025-39984](https://patchblox.com/security/data/cve/CVE-2025-39984.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0020 |  |
| [CVE-2025-40068](https://patchblox.com/security/data/cve/CVE-2025-40068.md) | High | fs: ntfs3: Fix integer overflow in run_unpack() | 8.4 | 0.0018 |  |
| [CVE-2025-39998](https://patchblox.com/security/data/cve/CVE-2025-39998.md) | High | scsi: target: target_core_configfs: Add length check to avoid buffer overflow | 7.8 | 0.0018 |  |
| [CVE-2025-40044](https://patchblox.com/security/data/cve/CVE-2025-40044.md) | High | fs: udf: fix OOB read in lengthAllocDescs handling | 7.8 | 0.0017 |  |
| [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 |  |
| [CVE-2025-40123](https://patchblox.com/security/data/cve/CVE-2025-40123.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Enforce expected_attach_type for tailcall c... | 7.8 | 0.0017 |  |
| [CVE-2025-39955](https://patchblox.com/security/data/cve/CVE-2025-39955.md) | High | tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). | 7.8 | 0.0017 |  |
| [CVE-2025-40067](https://patchblox.com/security/data/cve/CVE-2025-40067.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: reject index allocation if $BITMAP is... | 7.8 | 0.0016 |  |
| [CVE-2025-40058](https://patchblox.com/security/data/cve/CVE-2025-40058.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Disallow dirty tracking if incoheren... | 8.8 | 0.0016 |  |
| [CVE-2025-40047](https://patchblox.com/security/data/cve/CVE-2025-40047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 |  |
| [CVE-2025-39963](https://patchblox.com/security/data/cve/CVE-2025-39963.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring: fix incorrect io_kiocb reference in io... | 7.8 | 0.0016 |  |
| [CVE-2025-39977](https://patchblox.com/security/data/cve/CVE-2025-39977.md) | High | futex: Prevent use-after-free during requeue-PI | 7.8 | 0.0015 |  |
| [CVE-2025-40024](https://patchblox.com/security/data/cve/CVE-2025-40024.md) | High | vhost: Take a reference on the task in struct vhost_task. | 7.8 | 0.0015 |  |
| [CVE-2025-40081](https://patchblox.com/security/data/cve/CVE-2025-40081.md) | High | perf: arm_spe: Prevent overflow in PERF_IDX2OFF() | 7.8 | 0.0015 |  |
| [CVE-2025-40169](https://patchblox.com/security/data/cve/CVE-2025-40169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v... | 7.8 | 0.0015 |  |
| [CVE-2025-40018](https://patchblox.com/security/data/cve/CVE-2025-40018.md) | High | ipvs: Defer ip_vs_ftp unregister during netns cleanup | 7.8 | 0.0015 |  |
| [CVE-2025-40078](https://patchblox.com/security/data/cve/CVE-2025-40078.md) | Routine | bpf: Explicitly check accesses to bpf_sock_addr | 5.5 | 0.0025 |  |
| [CVE-2025-40070](https://patchblox.com/security/data/cve/CVE-2025-40070.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pps: fix warning in pps_register_cdev when regis... | 5.5 | 0.0024 |  |
| [CVE-2025-40115](https://patchblox.com/security/data/cve/CVE-2025-40115.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix crash in transport port remov... | 5.5 | 0.0023 |  |
| [CVE-2025-40030](https://patchblox.com/security/data/cve/CVE-2025-40030.md) | Routine | pinctrl: check the return value of pinmux_ops::get_function_name() | 5.5 | 0.0023 |  |
| [CVE-2025-40134](https://patchblox.com/security/data/cve/CVE-2025-40134.md) | Routine | kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 4.7 | 0.0023 |  |
| [CVE-2025-40049](https://patchblox.com/security/data/cve/CVE-2025-40049.md) | Routine | Squashfs: fix uninit-value in squashfs_get_parent | 5.5 | 0.0023 |  |
| [CVE-2025-40109](https://patchblox.com/security/data/cve/CVE-2025-40109.md) | Routine | crypto: rng - Ensure set_ent is always present | 5.5 | 0.0023 |  |
| [CVE-2025-40125](https://patchblox.com/security/data/cve/CVE-2025-40125.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  blk-mq: check kobject state_in_sysfs before dele... | 5.5 | 0.0023 |  |
| [CVE-2025-40153](https://patchblox.com/security/data/cve/CVE-2025-40153.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm: hugetlb: avoid soft lockup when mprotect to... | 5.5 | 0.0021 |  |
| [CVE-2025-40080](https://patchblox.com/security/data/cve/CVE-2025-40080.md) | Routine | nbd: restrict sockets to TCP and UDP | 6.1 | 0.0021 |  |
| [CVE-2025-40021](https://patchblox.com/security/data/cve/CVE-2025-40021.md) | Routine | tracing: dynevent: Add a missing lockdown check on dynevent | 5.5 | 0.0021 |  |
| [CVE-2025-39940](https://patchblox.com/security/data/cve/CVE-2025-39940.md) | Routine | dm-stripe: fix a possible integer overflow | 6.1 | 0.0020 |  |
| [CVE-2025-39956](https://patchblox.com/security/data/cve/CVE-2025-39956.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  igc: don't fail igc_probe() on LED setup error... | 5.5 | 0.0017 |  |
| [CVE-2025-39953](https://patchblox.com/security/data/cve/CVE-2025-39953.md) | Routine | cgroup: split cgroup_destroy_wq into 3 workqueues | 5.5 | 0.0016 |  |
| [CVE-2025-39816](https://patchblox.com/security/data/cve/CVE-2025-39816.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: always use READ_ONCE() to read ri... | 6.1 | 0.0015 |  |
| [CVE-2025-39947](https://patchblox.com/security/data/cve/CVE-2025-39947.md) | Routine | net/mlx5e: Harden uplink netdev access against device unbind | 5.5 | 0.0015 |  |
| [CVE-2025-39961](https://patchblox.com/security/data/cve/CVE-2025-39961.md) | Routine | iommu/amd/pgtbl: Fix possible race while increase page table level | 5.8 | 0.0012 |  |

---

Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.