Skip to content
OpenAdvisories
High ALAS2-2025-2955 8 CVEs

Important: kernel security update (Amazon Linux 2)

Published Jul 29, 2025 · Updated Aug 26, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-38324: In the Linux kernel, the following vulnerability has been resolved: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). CVE-2025-38177: In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent CVE-2025-38064: In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on device_shutdown() CVE-2025-38058: In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock CVE-2025-37932: In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_qlen_notify() idempotent CVE-2025-37798: In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() CVE-2023-53131: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak CVE-2022-50073: In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.355-280.664 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.355-280.664.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.355-280.664.amzn2
Amazon Linux · 2 perf 0:4.14.355-280.664.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.355-280.664.amzn2
Amazon Linux · 2 python-perf 0:4.14.355-280.664.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.355-280.664.amzn2

Vulnerabilities 8

  • High 7.8
    CVE-2025-37798

    codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()

    In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() After making all ->qlen_notify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fq_codel_dequ…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38058

    __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

    In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38064

    virtio: break and reset virtio devices on device_shutdown()

    In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on device_shutdown() Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang. Invalid read at addr 0x102877002, s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38177

    sch_hfsc: make hfsc_qlen_notify() idempotent

    In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-50073

    net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

    In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null Fixes a NULL pointer derefence bug triggered from tap driver. When tap_get_user calls virtio_net_hdr_to_skb…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-53131

    SUNRPC: Fix a server shutdown leak

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-37932

    sch_htb: make htb_qlen_notify() idempotent

    In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_qlen_notify() idempotent htb_qlen_notify() always deactivates the HTB class and in fact could trigger a warning if it is already deactivated. Therefore, it is not idempotent…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38324

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().

    In the Linux kernel, the following vulnerability has been resolved: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). As syzbot reported [0], mpls_route_input_rcu() can be called from mpls_getroute(), where is under RTNL. net->mpls.platform_label is…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50073.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53131.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-37798.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-37932.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38058.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38064.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38177.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38324.html