Skip to content
OpenAdvisories
High ALAS2-2025-2837 7 CVEs

Important: kernel security update (Amazon Linux 2)

Published Apr 15, 2025 · Updated Feb 8, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53019: In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() CVE-2023-53015: In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports CVE-2023-53007: In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can output as soon as it can be used CVE-2023-52993: In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL CVE-2023-1073: A memory corruption flaw was found in the Linux kernel's human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-50816: In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels CVE-2022-49753: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get()

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.305-227.531 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.305-227.531.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.305-227.531.amzn2
Amazon Linux · 2 perf 0:4.14.305-227.531.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.305-227.531.amzn2
Amazon Linux · 2 python-perf 0:4.14.305-227.531.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.305-227.531.amzn2

Vulnerabilities 7

  • High 7.8
    CVE-2022-49753

    dmaengine: Fix double increment of client_count in dma_chan_get()

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan_get() is called for a channel the channel client_count is incorrectly incremented twice for public ch…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.6
    CVE-2023-1073

    A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 5.5
    CVE-2023-52993

    x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL

    In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggering a crash the subsequent crash-kernel fails to boot about half of the time. It triggers a NULL pointe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2023-53015

    HID: betop: check shape of output reports

    In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the report counts for each report field to be at least 4, but hid_betopff_play() expects 4 report fields.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-50816

    ipv6: ensure sane device mtu in tunnels

    In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report [1] with no reproducer hints at a bug in ip6_gre tunnel (dev:ip6gretap0) Since ipv6 mcast code makes sure to read dev->mtu once a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53007

    tracing: Make sure trace_printk() can output as soon as it can be used

    In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can output as soon as it can be used Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53019

    net: mdio: validate parameter addr in mdiobus_get_phy()

    In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as addr, what may result in an out-of-bounds access to array mdio_map. One existing case is stmmac_init_p…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-49753.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50816.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-1073.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52993.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53007.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53015.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53019.html