Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-21722: In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced CVE-2024-58083: In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() CVE-2024-53173: In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open()
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-277.647 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-277.647.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-277.647.amzn2 |
Vulnerabilities 3
-
High 7.8
NFSv4.0: Fix a use-after-free problem in the asynchronous open()
In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply is seen, t…
-
High 7.8
KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is fully online _prior_ to clamping the index in kvm_get_vcpu(). If the index is "bad", the no…
-
High 7.8
nilfs2: do not force clear folio if buffer is referenced
In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect busy buffer heads from being force-cleared". This series fixes the buffer head state inconsistency issue…