Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40173: In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth CVE-2025-40070: In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail CVE-2024-26804: In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-280.713 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-280.713.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-280.713.amzn2 |
Vulnerabilities 3
-
High 7.8
net: ip_tunnel: prevent perpetual headroom growth
In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read…
-
High 7.8
net/ip6_tunnel: Prevent perpetual tunnel growth
In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5a…
-
Unscored —
pps: fix warning in pps_register_cdev when register device fail
In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb01db ("media: v4l2-dev: fix error handling in __video_register_device()"), the release hook …