Linux · 
Amazon Linux · Security advisory · June 26, 2025
Amazon Linux · Security advisory · June 26, 2025ALAS2023-2025-1050: Security update for 22 packages
ALAS2023-2025-1050, released June 26, 2025, fixes 72 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
72
None rated Critical
Exploited
0
None reported
Highest CVSS
8.4
Base score, 0 to 10
Highest EPSS
0.0090
59th percentile
Priority of the 72 CVEs
Patch now 0
Urgent 0
High 39
Routine 33
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 6.1.140-154.222.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-debuginfo | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-devel | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-headers | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-libbpf | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-libbpf-debuginfo | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-libbpf-devel | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-libbpf-static | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-livepatch-6.1.140-154.222 | amzn 2023 | 1.0-0.amzn2023 |
| kernel-modules-extra | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-modules-extra-common | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-tools | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 6.1.140-154.222.amzn2023 |
| kernel-tools-devel | amzn 2023 | 6.1.140-154.222.amzn2023 |
| perf | amzn 2023 | 6.1.140-154.222.amzn2023 |
| perf-debuginfo | amzn 2023 | 6.1.140-154.222.amzn2023 |
| python3-perf | amzn 2023 | 6.1.140-154.222.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 6.1.140-154.222.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2024-38541 | linux: In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 | None reported |
| High | CVE-2025-37928 | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 | None reported |
| High | CVE-2025-38018 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0048 | None reported |
| High | CVE-2025-37839 | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 | None reported |
| High | CVE-2025-37885 | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 | None reported |
| High | CVE-2025-37752 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | None reported |
| High | CVE-2025-37927 | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 | None reported |
| High | CVE-2024-26739 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0028 | None reported |
| High | CVE-2025-37849 | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 | None reported |
| High | CVE-2025-21853 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | None reported |
| High | CVE-2025-37923 | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 | None reported |
| High | CVE-2025-37913 | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 | None reported |
| High | CVE-2025-37921 | vxlan: vnifilter: Fix unlocked deletion of default FDB entry | 7.8 | 0.0024 | None reported |
| High | CVE-2024-50063 | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to... | 7.8 | 0.0023 | None reported |
| High | CVE-2025-23150 | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 | None reported |
| High | CVE-2025-37823 | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 | None reported |
| High | CVE-2025-37798 | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 | None reported |
| High | CVE-2025-38023 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0023 | None reported |
| High | CVE-2025-23142 | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 | None reported |
| High | CVE-2025-37797 | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 | None reported |
| High | CVE-2025-37819 | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 | None reported |
| High | CVE-2025-37915 | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 | None reported |
| High | CVE-2025-37963 | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0022 | None reported |
| High | CVE-2025-37789 | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 | None reported |
| High | CVE-2025-37890 | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 | None reported |
Showing 1 to 25 of 72
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.