Skip to content
OpenAdvisories
Medium ALAS2023-2025-1018 6 CVEs

Moderate: kernel security update (Amazon Linux 2023)

Published Jun 12, 2025 · Updated Jun 23, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22062: In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() CVE-2024-46751: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() CVE-2024-43840: In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG CVE-2024-36927: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() CVE-2024-36903: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() CVE-2024-26783: In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index

Fixed packages 22

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-libbpf-debuginfo 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.140-154.222 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 perf 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.140-154.222.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.140-154.222.amzn2023

Vulnerabilities 6

  • High 7.8
    CVE-2024-43840

    bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG

    In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG When BPF_TRAMP_F_CALL_ORIG is set, the trampoline calls __bpf_tramp_enter() and __bpf_tramp_exit() functions, passing them the struct bpf_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-46751

    btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

    In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Instead of doing a BUG_ON() handle the error by returning -EUCLEAN, aborting the transaction and logging an error me…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-22062

    sctp: add mutual exclusion in proc_sctp_do_udp_port()

    In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serialize calls to sctp_udp_sock_stop() and sctp_udp_sock_start() or risk a crash as syzbot reported: Oops: general protection fa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26783

    mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index

    In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa balancing on, when a numa system is running where a numa node doesn't have its local memory so it has no managed…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36903

    ipv6: Fix potential uninit-value access in __ip6_make_skb()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-36927

    ipv4: Fix uninit-value access in __ip_make_skb()

    In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1]. __ip_make_skb() tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-26783.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-36903.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-36927.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-43840.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-46751.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22062.html