Important: kernel security update (Amazon Linux 2)

Summary

Fixed packages 14

Vulnerabilities 11

• Critical 9.8
  CVE-2025-39702

  ipv6: sr: Fix MAC comparison to be constant-time

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025
• High 7.8
  CVE-2025-38386

  ACPICA: Refuse to evaluate a method if arguments are missing

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 25, 2025
• High 7.8
  CVE-2025-38464

  tipc: Fix use-after-free in tipc_conn_close().

  In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_conn_close() during netns dismantle. [0] tipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr an…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 25, 2025
• High 7.8
  CVE-2025-38572

  ipv6: reject malicious packets in ipv6_gso_segment()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb->transport_header. This 16bit field …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• High 7.8
  CVE-2025-39689

  ftrace: Also allocate and copy hash for reading of filter files

  In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterato…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025
• High 7.1
  CVE-2025-38713

  hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_readdir() method is capable to crash by calling hfsplus_uni2asc(): [ 667.121659][ T9805] ================================…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 4, 2025
• Unscored —
  CVE-2022-50053

  iavf: Fix reset error handling

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavf_close in iavf_reset_task error handling. Doing so can lead to double call of napi_disable, which can lead to deadlock there. Removing VF would …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• Unscored —
  CVE-2025-37995

  module: ensure that kobject_put() is safe for module type kobjects

  In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_or_create_module_kobject()', an internal kobject is created using 'module_ktype'. So call to 'kobject_put()' on e…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 29, 2025
• Unscored —
  CVE-2025-38415

  Squashfs: check return result of sb_min_blocksize

  In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug. Syzkaller forks multiple processes which after mounting the Squas…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 25, 2025
• Unscored —
  CVE-2025-38665

  can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

  In the Linux kernel, the following vulnerability has been resolved: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver d…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 22, 2025
• Unscored —
  CVE-2025-38700

  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated

  In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr allocation failure during iSER setup, the machine hits a panic because iscsi_conn->dd_d…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 4, 2025

References

• web
  https://alas.aws.amazon.com/cve/html/CVE-2022-50053.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-37995.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38386.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38415.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38464.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38572.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38665.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38700.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-38713.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-39689.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2025-39702.html