Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38727: In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() CVE-2025-38560: In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation CVE-2025-38206: In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free CVE-2025-38204: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.12 | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | bpftool6.12-debuginfo | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.12.40-64.114 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.12 | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-aarch64 | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-x86_64 | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-devel | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-headers | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-debuginfo | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-devel | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-static | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra-common | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-debuginfo | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-devel | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | perf6.12 | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | perf6.12-debuginfo | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12 | 1:6.12.40-64.114.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12-debuginfo | 1:6.12.40-64.114.amzn2023 |
Vulnerabilities 4
-
Critical 9.3
x86/sev: Evict cache lines during SNP memory validation
In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to priv…
-
High 7.8
jfs: fix array-index-out-of-bounds read in add_missing_indices
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is s8 but it must contain offsets into slot which can go from 0 to 127. Added a bound check for that error and return -EIO …
-
High 7.8
exfat: fix double free in delayed_free
In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : f…
-
Unscored —
netlink: avoid infinite retry looping in netlink_unicast()
In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() checks for the socket's read memory allocation constraints. Firstly, it has: rmem < READ_ONCE(sk->sk_rcvbuf) to …