Linux · Amazon Linux · Security advisory · October 27, 2025

ALAS2023-2025-1227: Security update for 22 packages

ALAS2023-2025-1227, released October 27, 2025, fixes 18 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
18
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0038
32nd percentile

Priority of the 18 CVEs

Patch now 0 Urgent 0 High 10 Routine 8

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.48-67.114.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.48-67.114.amzn2023
kernel-livepatch-6.12.48-67.114amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.48-67.114.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.48-67.114.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.48-67.114.amzn2023
kernel6.12-develamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-headersamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-libbpfamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-libbpf-debuginfoamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-libbpf-develamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-libbpf-staticamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-toolsamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.48-67.114.amzn2023
kernel6.12-tools-develamzn 20231:6.12.48-67.114.amzn2023
perf6.12amzn 20231:6.12.48-67.114.amzn2023
perf6.12-debuginfoamzn 20231:6.12.48-67.114.amzn2023
python3-perf6.12amzn 20231:6.12.48-67.114.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.48-67.114.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-40300 x86/vmscape: Add conditional IBPB mitigation7.3 0.0038 None reported
High CVE-2025-39880 libceph: fix invalid accesses to ceph_connection_v1_info7.8 0.0033 None reported
High CVE-2025-38248 bridge: mcast: Fix use-after-free during router port configuration7.8 0.0030 None reported
High CVE-2025-39677 net/sched: Fix backlog accounting in qdisc_dequeue_internal7.0 0.0021 None reported
High CVE-2025-39913 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.7.8 0.0019 None reported
High CVE-2025-39914 tracing: Silence warning when chunk allocation fails in trace_pid_write7.0 0.0017 None reported
High CVE-2025-39883 mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory7.6 0.0016 None reported
High CVE-2025-39877 mm/damon/sysfs: fix use-after-free in state_show()7.8 0.0015 None reported
High CVE-2025-39881 kernfs: Fix UAF in polling when open file is released7.8 0.0015 None reported
High CVE-2025-39917 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpf_crypt...7.8 0.0015 None reported
Routine CVE-2025-39830 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_pool_buddy...5.5 0.0019 None reported
Routine CVE-2025-39927 ceph: fix race condition validating r_parent before applying state6.4 0.0015 None reported
Routine CVE-2025-39886 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()5.5 0.0015 None reported
Routine CVE-2025-39909 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()5.5 0.0015 None reported
Routine CVE-2025-39916 mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()5.5 0.0015 None reported
Routine CVE-2025-39926 linux: In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genl_bind() invoking bind() after...5.5 0.0015 None reported
Routine CVE-2025-39912 linux: In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing page...5.5 0.0015 None reported
Routine CVE-2025-39884 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by i...5.5 0.0011 None reported
Showing 1 to 18 of 18 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.