Skip to content
OpenAdvisories
High 1 exploited CVE ALAS2-2025-2988 7 CVEs

Important: kernel security update (Amazon Linux 2)

Published Aug 26, 2025 · Updated Sep 4, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-38352: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() CVE-2025-38215: In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var CVE-2025-38212: In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU CVE-2025-38181: In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). CVE-2025-38023: In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfs_get_lock_context in unlock path CVE-2022-50055: In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling CVE-2022-50030: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.355-280.679 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.355-280.679.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.355-280.679.amzn2
Amazon Linux · 2 perf 0:4.14.355-280.679.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.355-280.679.amzn2
Amazon Linux · 2 python-perf 0:4.14.355-280.679.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.355-280.679.amzn2

Vulnerabilities 7

  • High 7.8
    CVE-2025-38352 Exploited Public exploit

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

    In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Sep 4, 2025
  • High 7.8
    CVE-2025-38212

    ipc: fix to protect IPCS lookups using RCU

    In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, [0] [0]: https://lore.kernel.org/all/67af13f8.050a0220.21dd3.0038.GAE@google.com/…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2025-38181

    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().

    In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). syzkaller reported a null-ptr-deref in sock_omalloc() while allocating a CALIPSO option. [0] The NULL is of struct sock, which was …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-50030

    scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input Malformed user input to debugfs results in buffer overflow crashes. Adapt input string lengths to fit within i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-50055

    iavf: Fix adminq error handling

    In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavf_alloc_asq_bufs/iavf_alloc_arq_bufs allocates with dma_alloc_coherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ in case error happens du…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38023

    nfs: handle failure of nfs_get_lock_context in unlock path

    In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfs_get_lock_context in unlock path When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenl…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38215

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var

    In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If fb_add_videomode() in do_register_framebuffer() fails to allocate memory for fb_videomode, it will later…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50030.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50055.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38023.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38181.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38212.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38215.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38352.html