Skip to content
OpenAdvisories
High ALAS2-2025-3038 2 CVEs

Important: kernel security update (Amazon Linux 2)

Published Oct 14, 2025 · Updated Oct 14, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53343: In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). CVE-2022-50410: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.355-280.698 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.355-280.698.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.355-280.698.amzn2
Amazon Linux · 2 perf 0:4.14.355-280.698.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.355-280.698.amzn2
Amazon Linux · 2 python-perf 0:4.14.355-280.698.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.355-280.698.amzn2

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-50410

    NFSD: Protect against send buffer overflow in NFSv2 READ

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2023-53343

    icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().

    In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). With some IPv6 Ext Hdr (RPL, SRv6, etc.), we can send a packet that has the link-local address as src and dst IP and wil…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50410.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53343.html