Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22058: In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. CVE-2025-21764: In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() CVE-2025-21762: In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() CVE-2025-21760: In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() CVE-2025-21753: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction CVE-2025-21731: In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect CVE-2024-57979: In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free CVE-2024-56658: In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle CVE-2024-56650: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() CVE-2024-53103: In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer CVE-2024-53057: In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT CVE-2024-50033: In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets CVE-2024-49883: In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() CVE-2022-49720: In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blk_mq_alloc_request_hctx() CVE-2022-49390: In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev CVE-2022-49179: In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oom_bfqq
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-276.618 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-276.618.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-276.618.amzn2 |
Vulnerabilities 16
-
Critical 9.8
slip: make slhc_remember() more robust against malicious packets
In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that slhc_remember() was missing checks against malicious packets [1]. slhc_remember() only checked the size of t…
-
High 8.1CVE-2025-21760 EPSS 38%
ndisc: extend RCU protection in ndisc_send_skb()
In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potenti…
-
High 8.1
arp: use RCU protection in arp_xmit()
In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.
-
High 7.8
block, bfq: don't move oom_bfqq
In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oom_bfqq Our test report a UAF: [ 2073.019181] ================================================================== [ 2073.019188] BUG: KASAN: use-after-free in __bfq_put…
-
High 7.8
macsec: fix UAF bug for real_dev
In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real_dev. That can not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_…
-
High 7.8
block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blk_mq_alloc_request_hctx() This patch prevents that test nvme/004 triggers the following: UBSAN: array-index-out-of-bounds in block/blk-mq.h:135:9 in…
-
High 7.8
ext4: aovid use-after-free in ext4_ext_insert_extent()
In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in ext4_ext_insert_extent(), if the path is reallocated in ext4_ext_create_new_leaf(), we'll use the stale…
-
High 7.8
net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Qdiscs with major handle ffff: are assumed to be either root or ingress. This assumption is bogus since it…
-
High 7.8
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a dangl…
-
High 7.8
net: defer final 'struct net' free in netns dismantle
In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free in dst_destroy [1] Issue is in xfrm6_net_init() and xfrm4_net_init() : They copy xfrm[46]_dst_ops_tem…
-
High 7.8
pps: Fix a use-after-free
In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting: pps pps1: removed ------------[ cut here ]----------…
-
High 7.8
nbd: don't allow reconnect after disconnect
In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: 1) grab nbd_config temporarily; 2) nbd_genl_disconnect() flush all recv_work() and release the initial …
-
High 7.8
btrfs: fix use-after-free when attempting to join an aborted transaction
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are trying to join the current transaction and if it's aborted, we read its 'aborted' field after unlocking fs…
-
High 7.8
ndisc: use RCU protection in ndisc_alloc_skb()
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.
-
High 7.1
netfilter: x_tables: fix LED ID check in led_tg_check()
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN: BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 Read of size 1 at addr ffff…
-
Unscored —
udp: Fix memory accounting leak.
In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memory usage issue. Under normal operation, the UDP memory usage reported in /proc/net/sockstat remains close to zero. Howev…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49179.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49390.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-49720.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-49883.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50033.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-53057.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-53103.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-56650.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-56658.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-57979.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21731.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21753.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21760.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21762.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21764.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-22058.html