ALAS2023-2025-794: Security update for 21 packages

ALAS2023-2025-794, released January 6, 2025, fixes 111 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

111

None rated Critical

Exploited

None reported

Highest CVSS

9.1

Base score, 0 to 10

Highest EPSS

0.0136

71st percentile

Priority of the 111 CVEs

Patch now 0
                                Urgent 0
                                High 33
                                Routine 78

Fixed package versions

Product	Release	Fixed in
bpftool	amzn 2023	6.1.115-126.197.amzn2023
bpftool-debuginfo	amzn 2023	6.1.115-126.197.amzn2023
kernel	amzn 2023	6.1.115-126.197.amzn2023
kernel-debuginfo	amzn 2023	6.1.115-126.197.amzn2023
kernel-debuginfo-common-aarch64	amzn 2023	6.1.115-126.197.amzn2023
kernel-debuginfo-common-x86_64	amzn 2023	6.1.115-126.197.amzn2023
kernel-devel	amzn 2023	6.1.115-126.197.amzn2023
kernel-headers	amzn 2023	6.1.115-126.197.amzn2023
kernel-libbpf	amzn 2023	6.1.115-126.197.amzn2023
kernel-libbpf-devel	amzn 2023	6.1.115-126.197.amzn2023
kernel-libbpf-static	amzn 2023	6.1.115-126.197.amzn2023
kernel-livepatch-6.1.115-126.197	amzn 2023	1.0-0.amzn2023
kernel-modules-extra	amzn 2023	6.1.115-126.197.amzn2023
kernel-modules-extra-common	amzn 2023	6.1.115-126.197.amzn2023
kernel-tools	amzn 2023	6.1.115-126.197.amzn2023
kernel-tools-debuginfo	amzn 2023	6.1.115-126.197.amzn2023
kernel-tools-devel	amzn 2023	6.1.115-126.197.amzn2023
perf	amzn 2023	6.1.115-126.197.amzn2023
perf-debuginfo	amzn 2023	6.1.115-126.197.amzn2023
python3-perf	amzn 2023	6.1.115-126.197.amzn2023
python3-perf-debuginfo	amzn 2023	6.1.115-126.197.amzn2023

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-47685	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	9.1	0.0136	None reported
High	CVE-2024-50083	kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...	7.5	0.0087	None reported
High	CVE-2024-47696	linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#ch...	7.8	0.0073	None reported
High	CVE-2024-50154	python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.0	0.0056	None reported
High	CVE-2024-47682	linux: In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sd_read_block_...	7.8	0.0054	None reported
High	CVE-2024-49855	linux: In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal complet...	7.0	0.0046	None reported
High	CVE-2024-49882	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0032	None reported
High	CVE-2024-47742	linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firm...	7.8	0.0029	None reported
High	CVE-2024-50151	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0028	None reported
High	CVE-2024-49884	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0028	None reported
High	CVE-2024-50143	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0028	None reported
High	CVE-2024-49883	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0028	None reported
High	CVE-2024-49936	linux: In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_has...	7.8	0.0027	None reported
High	CVE-2024-49889	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0026	None reported
High	CVE-2024-49860	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.1	0.0025	None reported
High	CVE-2024-49983	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0025	None reported
High	CVE-2024-47701	linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes u...	7.8	0.0025	None reported
High	CVE-2024-50127	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0025	None reported
High	CVE-2024-50131	linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when valida...	7.8	0.0025	None reported
High	CVE-2024-50115	kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B...	7.1	0.0025	None reported
High	CVE-2024-50150	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0024	None reported
High	CVE-2023-52751	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0024	None reported
High	CVE-2024-35963	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.1	0.0024	None reported
High	CVE-2024-50195	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c...	7.8	0.0023	None reported
High	CVE-2024-50186	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0023	None reported

Also fixes CVE-2024-47685

SUSE-SU-2024:4318-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2024:4387-1
kernel-coco, kernel-coco_debug, kernel-source-coco and 1 more on sles 15.6
RHSA-2025:6966
kernel, kernel-64k, kernel-64k-core and 71 more on RHEL 9
ELSA-2025-6966
bpftool, kernel, kernel-abi-stablelists and 27 more on ol 9
SUSE-SU-2024:3984-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6
SUSE-SU-2024:3986-1
kernel-livepatch-SLE15-SP6-RT_Update_5, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
ELSA-2024-12887
bpftool, kernel-uek, kernel-uek-container and 11 more on ol 8, ol 9
ELSA-2024-12884
kernel-uek, kernel-uek-container, kernel-uek-container-debug and 8 more on ol 8

Vendor advisory

https://alas.aws.amazon.com/AL2023/ALAS-2025-794.html

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/alas2023-2025-794">ALAS2023-2025-794 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.