Skip to content
OpenAdvisories
Medium ALAS2-2025-2892 5 CVEs

Moderate: kernel security update (Amazon Linux 2)

Published Jun 12, 2025 · Updated Jun 24, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53109: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom CVE-2023-53101: In the Linux kernel, the following vulnerability has been resolved: ext4: zero i_disksize when initializing the bootloader inode CVE-2023-53100: In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4_update_inline_data CVE-2023-53089: In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4_xattr_delete_inode CVE-2023-53075: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec() when index is 0

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.311-233.529 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.311-233.529.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.311-233.529.amzn2
Amazon Linux · 2 perf 0:4.14.311-233.529.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.311-233.529.amzn2
Amazon Linux · 2 python-perf 0:4.14.311-233.529.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.311-233.529.amzn2

Vulnerabilities 5

  • High 7.8
    CVE-2023-53100

    ext4: fix WARNING in ext4_update_inline_data

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4_update_inline_data Syzbot found the following issue: EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. fscr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53075

    ftrace: Fix invalid address access in lookup_rec() when index is 0

    In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec() when index is 0 KASAN reported follow problem: BUG: KASAN: use-after-free in lookup_rec Read of size 8 at addr ffff000199270ff0 by task modp…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53089

    ext4: fix task hung in ext4_xattr_delete_inode

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4_xattr_delete_inode Syzbot reported a hung task problem: ================================================================== INFO: task syz-executor232:5073 blocked …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53101

    ext4: zero i_disksize when initializing the bootloader inode

    In the Linux kernel, the following vulnerability has been resolved: ext4: zero i_disksize when initializing the bootloader inode If the boot loader inode has never been used before, the EXT4_IOC_SWAP_BOOT inode will initialize it, including setting the i_size…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53109

    net: tunnels: annotate lockless accesses to dev->needed_headroom

    In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparently update dev->needed_headroom in their xmit path. This patch takes care of three tunnels xmit, and als…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53075.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53089.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53100.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53101.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53109.html