Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-21991: In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes CVE-2025-21858: In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). CVE-2025-21796: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them CVE-2025-21791: In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() CVE-2025-21759: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() CVE-2024-50301: In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission CVE-2024-50278: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume CVE-2024-50264: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans CVE-2024-50036: In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_release() CVE-2024-49882: In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path CVE-2024-47757: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() CVE-2024-47745: In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() CVE-2023-52975: In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress CVE-2023-52784: In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() CVE-2023-39189: nftables out-of-bounds read in nf_osf_match_one() CVE-2023-1611: A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea CVE-2021-46981: In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flush_workqueue
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-276.639 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-276.639.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-276.639.amzn2 |
Vulnerabilities 17
-
Critical 9.8
nfsd: clear acl_access/acl_default after releasing them
In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_default will be released simultaneously. However, acl_access will still retain a point…
-
High 7.8
scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug report and analysis from Ding Hui. During iSCSI session logout, if another task accesses the shost ipaddress attr…
-
High 7.8
mm: call the security_mmap_file() LSM hook in remap_file_pages()
In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the proces…
-
High 7.8CVE-2024-49882 Public exploit
ext4: fix double brelse() the buffer of the extents path
In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has been released, otherwise it may be released twice. An example of …
-
High 7.8
net: do not delay dst_entries_add() in dst_release()
In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_release() dst_entries_add() uses per-cpu data that might be freed at netns dismantle from ip6_route_net_exit() calling dst_entries_destroy() Before …
-
High 7.8
vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After…
-
High 7.8
security/keys: fix slab-out-of-bounds in key_task_permission
In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-o…
-
High 7.8
ipv6: mcast: extend RCU protection in igmp6_send()
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a pot…
-
High 7.8
vrf: use RCU protection in l3mdev_l3_out()
In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() ip_push_pending_frames() ip_send_skb() ip_local_out() __ip_local_out() l3mdev_ip…
-
High 7.8
geneve: Fix use-after-free in geneve_find_dev().
In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in geneve_find_dev() [0] without repro. geneve_configure() links struct geneve_dev.next to net_generic(net…
-
High 7.8
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, load_microcode_amd() iterates over all NUMA nodes, retrieves their CPU masks and unconditionally accesses p…
-
High 7.1
dm cache: fix potential out-of-bounds access on the first resume
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This …
-
Medium 6.3
A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows …
-
Medium 5.1
Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()
A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading…
-
Unscored —
nbd: Fix NULL pointer in flush_workqueue
In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flush_workqueue Open /dev/nbdX first, the config_refs will be 1 and the pointers in nbd_device are still null. Disconnect /dev/nbdX, then reference a null recv_workq.…
-
Unscored —
bonding: stop the device in bond_setup_by_slave()
In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbether: only support ethernet devices") has been able to keep syzbot away from net/lapb, until today. In the fo…
-
Unscored —
nilfs2: fix potential oob read in nilfs_btree_check_delete()
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before deleting a b-tree entry…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46981.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-1611.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-39189.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-52784.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-52975.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-47745.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-47757.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-49882.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50036.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50264.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50278.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50301.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21759.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21791.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21796.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21858.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21991.html