{ "fix": "ALAS2023-2025-948", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-948", "summary": "ALAS2023-2025-948, released April 23, 2025, fixes 38 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.", "platform": "linux", "type": "advisory", "title": "Security update for 22 packages", "released": "2025-04-23T22:04:00Z", "priority": "High", "priorityTier": 3, "priorityReason": "Closes CVE-2025-22056, high severity", "supported": true, "cveCount": 38, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.0062, "maxCvss": 7.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-948.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-libbpf", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-libbpf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-libbpf-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-libbpf-static", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.12.23-29.97", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.23-29.97", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel6.12", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "perf6.12", "productUrl": "https://patchblox.com/security/product/linux/perf6.12", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "python3-perf6.12", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true }, { "product": "python3-perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "6.12.23-29.97.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2025-22056", "url": "https://patchblox.com/security/cve/CVE-2025-22056", "title": "kernel-64k-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00327, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37785", "url": "https://patchblox.com/security/cve/CVE-2025-37785", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "important", "cvss": 7.1, "epss": 0.00314, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22035", "url": "https://patchblox.com/security/cve/CVE-2025-22035", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22063", "url": "https://patchblox.com/security/cve/CVE-2025-22063", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22055", "url": "https://patchblox.com/security/cve/CVE-2025-22055", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22087", "url": "https://patchblox.com/security/cve/CVE-2025-22087", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0024, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-58093", "url": "https://patchblox.com/security/cve/CVE-2024-58093", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22058", "url": "https://patchblox.com/security/cve/CVE-2025-22058", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: u...", "priority": "High", "severity": "important", "cvss": 7.3, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21751", "url": "https://patchblox.com/security/cve/CVE-2025-21751", "title": "linux: linux - security update", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22085", "url": "https://patchblox.com/security/cve/CVE-2025-22085", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nRDMA/core: Fix use-after-free when rename device...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22091", "url": "https://patchblox.com/security/cve/CVE-2025-22091", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nRDMA/mlx5: Fix page_size variable overflow\nChange...", "priority": "High", "severity": "moderate", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22036", "url": "https://patchblox.com/security/cve/CVE-2025-22036", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nexfat: fix random stack corruption after get_bloc...", "priority": "High", "severity": "moderate", "cvss": 7, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39688", "url": "https://patchblox.com/security/cve/CVE-2025-39688", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching vi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0062, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22025", "url": "https://patchblox.com/security/cve/CVE-2025-22025", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnfsd: put dl_stid if fail to queue dl_recall\nBefo...", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00593, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22059", "url": "https://patchblox.com/security/cve/CVE-2025-22059", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk-\u003Esk_rmem_alloc", "priority": "Routine", "severity": "medium", "cvss": 5.7, "epss": 0.00492, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38637", "url": "https://patchblox.com/security/cve/CVE-2025-38637", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22062", "url": "https://patchblox.com/security/cve/CVE-2025-22062", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00301, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22086", "url": "https://patchblox.com/security/cve/CVE-2025-22086", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nRDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow...", "priority": "Routine", "severity": "low", "cvss": 5.5, "epss": 0.00298, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22034", "url": "https://patchblox.com/security/cve/CVE-2025-22034", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22064", "url": "https://patchblox.com/security/cve/CVE-2025-22064", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0027, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39989", "url": "https://patchblox.com/security/cve/CVE-2025-39989", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine co...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00246, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22045", "url": "https://patchblox.com/security/cve/CVE-2025-22045", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: B...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00243, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23136", "url": "https://patchblox.com/security/cve/CVE-2025-23136", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22080", "url": "https://patchblox.com/security/cve/CVE-2025-22080", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22044", "url": "https://patchblox.com/security/cve/CVE-2025-22044", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22057", "url": "https://patchblox.com/security/cve/CVE-2025-22057", "title": "net: decrease cached dst counters in dst_release", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22075", "url": "https://patchblox.com/security/cve/CVE-2025-22075", "title": "kernel-livepatch-SLE15-SP7_Update_1: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22081", "url": "https://patchblox.com/security/cve/CVE-2025-22081", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22089", "url": "https://patchblox.com/security/cve/CVE-2025-22089", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nRDMA/core: Don\u0027t expose hw_counters outside of in...", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22090", "url": "https://patchblox.com/security/cve/CVE-2025-22090", "title": "x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22047", "url": "https://patchblox.com/security/cve/CVE-2025-22047", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23138", "url": "https://patchblox.com/security/cve/CVE-2025-23138", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22033", "url": "https://patchblox.com/security/cve/CVE-2025-22033", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22046", "url": "https://patchblox.com/security/cve/CVE-2025-22046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Harden uretprobe syscall trampoline...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22076", "url": "https://patchblox.com/security/cve/CVE-2025-22076", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: fix missing shutdown check xfstests gene...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22030", "url": "https://patchblox.com/security/cve/CVE-2025-22030", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22024", "url": "https://patchblox.com/security/cve/CVE-2025-22024", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix management of listener transports Cur...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22027", "url": "https://patchblox.com/security/cve/CVE-2025-22027", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T07:50:38Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }