Linux · Amazon Linux · Security advisory · July 29, 2025

ALAS2023-2025-1130: Security update for 22 packages

ALAS2023-2025-1130, released July 29, 2025, fixes 36 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
36
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0051
43rd percentile

Priority of the 36 CVEs

Patch now 0 Urgent 0 High 19 Routine 17

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.37-61.105.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.37-61.105.amzn2023
kernel-livepatch-6.12.37-61.105amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.37-61.105.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.37-61.105.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.37-61.105.amzn2023
kernel6.12-develamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-headersamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-libbpfamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-libbpf-debuginfoamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-libbpf-develamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-libbpf-staticamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-toolsamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.37-61.105.amzn2023
kernel6.12-tools-develamzn 20231:6.12.37-61.105.amzn2023
perf6.12amzn 20231:6.12.37-61.105.amzn2023
perf6.12-debuginfoamzn 20231:6.12.37-61.105.amzn2023
python3-perf6.12amzn 20231:6.12.37-61.105.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.37-61.105.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-38399 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()7.0 0.0051 None reported
High CVE-2025-38139 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resettin...7.1 0.0046 None reported
High CVE-2025-38264 nvme-tcp: sanitize request list handling7.8 0.0045 None reported
High CVE-2025-38379 smb: client: fix warning when reconnecting channel7.1 0.0041 None reported
High CVE-2025-38523 kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbd_response slab to allow usercop...7.3 0.0039 None reported
High CVE-2025-38350 net/sched: Always pass notifications when child class becomes empty7.8 0.0030 None reported
High CVE-2025-38236 af_unix: Don't leave consecutive consumed OOB skbs.7.8 0.0030 None reported
High CVE-2025-38244 smb: client: fix potential deadlock when reconnecting channels7.0 0.0025 None reported
High CVE-2025-38279 bpf: Do not include stack ptr register in precision backtracking bookkeeping7.8 0.0024 None reported
High CVE-2025-38372 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit...7.0 0.0022 None reported
High CVE-2025-38403 vsock/vmci: Clear the vmci transport packet properly when initializing it7.8 0.0022 None reported
High CVE-2025-38389 drm/i915/gt: Fix timeline left held on VMA alloc error7.8 0.0022 None reported
High CVE-2025-38386 ACPICA: Refuse to evaluate a method if arguments are missing7.1 0.0021 None reported
High CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size7.8 0.0021 None reported
High CVE-2025-38396 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass7.8 0.0020 None reported
High CVE-2025-38413 linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length chec...7.0 0.0020 None reported
High CVE-2025-40216 linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignmen...7.8 0.0015 None reported
High CVE-2025-38383 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system7.0 0.0013 None reported
High CVE-2025-38373 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug...7.0 0.0013 None reported
Routine CVE-2025-38405 kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system5.5 0.0043 None reported
Routine CVE-2025-38393 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN5.5 0.0041 None reported
Routine CVE-2025-38365 btrfs: fix a race between renames and directory logging5.5 0.0036 None reported
Routine CVE-2025-38064 virtio: break and reset virtio devices on device_shutdown()6.7 0.0025 None reported
Routine CVE-2025-38400 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug...5.5 0.0022 None reported
Routine CVE-2025-38387 RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert5.5 0.0021 None reported
Showing 1 to 25 of 36 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.