Skip to content
OpenAdvisories
High ALAS2-2025-3001 5 CVEs

Important: kernel security update (Amazon Linux 2)

Published Sep 9, 2025 · Updated Sep 16, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-38499: In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns CVE-2025-38477: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate CVE-2025-38200: In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw CVE-2025-38193: In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period CVE-2023-52935: In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.355-280.684 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.355-280.684.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.355-280.684.amzn2
Amazon Linux · 2 perf 0:4.14.355-280.684.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.355-280.684.amzn2
Amazon Linux · 2 python-perf 0:4.14.355-280.684.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.355-280.684.amzn2

Vulnerabilities 5

  • High 7.8
    CVE-2023-52935

    mm/khugepaged: fix ->anon_vma race

    In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, collapse_and_free_pmd() requires it to be locked. Page table traversal is allowed under any one of the mmap lock, t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38193

    net_sched: sch_sfq: reject invalid perturb period

    In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period Gerrard Tai reported that SFQ perturb_period has no range check yet, and this can be used to trigger a race condition fixed in a separate pat…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38477

    net/sched: sch_qfq: Fix race condition on qfq_aggregate

    In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can occur when 'agg' is modified in qfq_change_agg (called during qfq_enqueue) while other threads access it concurren…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38499

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

    In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hidden by a mount we wouldn't be able to …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38200

    i40e: fix MMIO write access to an invalid page in i40e_clear_hw

    In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Preven…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-52935.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38193.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38200.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38477.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-38499.html