Skip to content
OpenAdvisories
High ALAS2-2025-3053 6 CVEs

Important: kernel security update (Amazon Linux 2)

Published Oct 27, 2025 · Updated Oct 27, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-39955: In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). CVE-2025-39923: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees CVE-2025-39773: In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() CVE-2023-53567: In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path CVE-2023-53530: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() CVE-2022-50422: In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2 kernel 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-debuginfo 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-debuginfo-common-aarch64 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-debuginfo-common-x86_64 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-devel 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-headers 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-livepatch-4.14.355-280.706 0:1.0-0.amzn2
Amazon Linux · 2 kernel-tools 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-tools-debuginfo 0:4.14.355-280.706.amzn2
Amazon Linux · 2 kernel-tools-devel 0:4.14.355-280.706.amzn2
Amazon Linux · 2 perf 0:4.14.355-280.706.amzn2
Amazon Linux · 2 perf-debuginfo 0:4.14.355-280.706.amzn2
Amazon Linux · 2 python-perf 0:4.14.355-280.706.amzn2
Amazon Linux · 2 python-perf-debuginfo 0:4.14.355-280.706.amzn2

Vulnerabilities 6

  • High 7.8
    CVE-2022-50422

    scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()

    In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() When executing SMP task failed, the smp_execute_task_sg() calls del_timer() to delete "slow_task->timer". However, if the timer h…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53530

    scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The following call trace was observed: localhost kernel: nvme nvme0: NVME-FC{0}: controller connect complete localhost …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53567

    spi: qup: Don't skip cleanup in remove's error path

    In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-39773

    net: bridge: fix soft lockup in br_multicast_query_expired()

    In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large value, the local variable 'time' in br_multicast_send_query() may overflow. If the ti…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-39923

    dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we have no way to ensure the BAM is on. This is often the case fo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-39955

    tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). syzbot reported the splat below where a socket had tcp_sk(sk)->fastopen_rsk in the TCP_ESTABLISHED state. [0] syzbot reused the server…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50422.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53530.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-53567.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39773.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39923.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39955.html