Skip to content
OpenAdvisories
High 1 exploited CVE ALAS2023-2025-1254 48 CVEs

Important: kernel6.12 security update (Amazon Linux 2023)

Published Oct 27, 2025 · Updated Oct 27, 2025

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40169: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops CVE-2025-40153: In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area CVE-2025-40134: In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() CVE-2025-40129: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum CVE-2025-40125: In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx CVE-2025-40123: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility CVE-2025-40115: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() CVE-2025-40109: In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present CVE-2025-40081: In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() CVE-2025-40080: In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP CVE-2025-40078: In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr CVE-2025-40070: In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail CVE-2025-40068: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in run_unpack() CVE-2025-40067: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist CVE-2025-40058: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk CVE-2025-40057: In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks CVE-2025-40052: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory CVE-2025-40049: In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent CVE-2025-40048: In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask CVE-2025-40047: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() CVE-2025-40044: In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling CVE-2025-40035: In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak CVE-2025-40030: In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() CVE-2025-40024: In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhost_task. CVE-2025-40021: In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent CVE-2025-40018: In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup CVE-2025-40009: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: check p->vec_buf for NULL CVE-2025-40006: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted CVE-2025-39998: In the Linux kernel, the following vulnerability has been resolved: scsi: target: target_core_configfs: Add length check to avoid buffer overflow CVE-2025-39992: In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA CVE-2025-39990: In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_helper_proto CVE-2025-39984: In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process CVE-2025-39980: In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group CVE-2025-39977: In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI CVE-2025-39975: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_compound_op() CVE-2025-39967: In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font CVE-2025-39965: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI CVE-2025-39964: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg CVE-2025-39963: In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io_link_skb CVE-2025-39961: In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level CVE-2025-39956: In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igc_probe() on LED setup error CVE-2025-39955: In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconn

Fixed packages 22

ReleasePackageFixed in
Amazon Linux · 2023 bpftool6.12 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 bpftool6.12-debuginfo 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.12.53-69.119 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel6.12 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-aarch64 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-x86_64 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-devel 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-headers 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-libbpf 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-libbpf-debuginfo 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-libbpf-devel 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-libbpf-static 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra-common 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-tools 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-tools-debuginfo 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 kernel6.12-tools-devel 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 perf6.12 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 perf6.12-debuginfo 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 python3-perf6.12 1:6.12.53-69.119.amzn2023
Amazon Linux · 2023 python3-perf6.12-debuginfo 1:6.12.53-69.119.amzn2023

Vulnerabilities 48

  • High 7.8
    CVE-2025-39964 Exploited Public exploit

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, c…

    KEV Sep 18, 2026
  • Critical 9.8
    CVE-2025-39946 Public exploit EPSS 11%

    tls: make sure to abort the stream if headers are bogus

    In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read o…

  • Critical 9.8

    smb: client: fix wrong index reference in smb2_compound_op()

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_compound_op() In smb2_compound_op(), the loop that processes each command's response uses wrong indices when accessing response bufferes. This i…

  • High 8.8

    iommu/amd/pgtbl: Fix possible race while increase page table level

    In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host page table implementation supports dynamic page table levels (up to 6 levels), starting with a 3-level co…

  • High 8.8

    iommu/vt-d: Disallow dirty tracking if incoherent page walk

    In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succ…

  • High 8.4

    fs: ntfs3: Fix integer overflow in run_unpack()

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in run_unpack() The MFT record relative to the file being opened contains its runlist, an array containing information about the file's location on the physica…

  • High 7.8

    crypto: af_alg - Set merge to zero early in af_alg_sendmsg

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a c…

  • High 7.8

    igc: don't fail igc_probe() on LED setup error

    In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igc_probe() on LED setup error When igc_led_setup() fails, igc_probe() fails and triggers kernel panic in free_netdev() since unregister_netdev() is not called. [1] This behav…

  • High 7.8

    io_uring: fix incorrect io_kiocb reference in io_link_skb

    In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io_link_skb In io_link_skb function, there is a bug where prev_notif is incorrectly assigned using 'nd' instead of 'prev_nd'. This causes the con…

  • High 7.8
    CVE-2025-39965 Public exploit

    xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

    In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the by…

  • High 7.8

    fbcon: fix integer overflow in fbcon_do_set_font

    In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font par…

  • High 7.8

    futex: Prevent use-after-free during requeue-PI

    In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI syzbot managed to trigger the following race: T1 T2 futex_wait_requeue_pi() futex_do_wait() schedule() futex_requeue() futex_proxy_trylock_atom…

  • High 7.8

    bpf: Check the helper function is valid in get_helper_proto

    In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_helper_proto kernel test robot reported verifier bug [1] where the helper func pointer could be NULL due to disabled config option. As Alexei su…

  • High 7.8

    mm/hugetlb: fix folio is still mapped when deleted

    In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. remove_inode_single_folio will unmap the folio if the folio is still mapped. However, it's cal…

  • High 7.8

    ipvs: Defer ip_vs_ftp unregister during netns cleanup

    In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leadin…

  • High 7.8

    vhost: Take a reference on the task in struct vhost_task.

    In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhost_task. vhost_task_create() creates a task and keeps a reference to its task_struct. That task may exit early via a signal and its task_struc…

  • High 7.8

    fs: udf: fix OOB read in lengthAllocDescs handling

    In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descriptor, lengthAllocDescs comes from on-disk data and must be validated against the block size. Crafted or…

  • High 7.8

    io_uring/waitid: always prune wait queue entry in io_waitid_wait()

    In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() For a successful return, always remove our entry from the wait queue entry list. Previously this was skipped if a cancelatio…

  • High 7.8

    fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist

    In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation requires at least one bit in the $BITMAP attribute to track usage of index entries. If the bitmap is em…

  • High 7.8

    perf: arm_spe: Prevent overflow in PERF_IDX2OFF()

    In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to unsigned long to avoid overflow when handling large AUX buffer sizes (>= 2 GiB).

  • High 7.8
    CVE-2025-40123 Public exploit

    bpf: Enforce expected_attach_type for tailcall compatibility

    In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpf_prog_test_run_xdp() function…

  • High 7.8

    bpf: Reject negative offsets for ALU ops

    In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the check_alu_op() function validates instructions with ALU operations. The 'offset' field in these instructions is a sig…

  • High 7.5

    uio_hv_generic: Let userspace take care of interrupt mask

    In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by default in uio_hv_generic driver as the interrupt mask value is supposed to be controlled c…

  • High 7.5

    sunrpc: fix null pointer dereference on zero-length checksum

    In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when acce…

  • High 7.1

    scsi: target: target_core_configfs: Add length check to avoid buffer overflow

    In the Linux kernel, the following vulnerability has been resolved: scsi: target: target_core_configfs: Add length check to avoid buffer overflow A buffer overflow arises from the usage of snprintf to write into the buffer "buf" in target_lu_gp_members_show f…

  • Medium 5.5

    io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths

    In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths Since the buffers are mapped from userspace, it is prudent to use READ_ONCE() to read the value into a local variabl…

  • Unscored —

    dm-stripe: fix a possible integer overflow

    In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripe_io_hints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limi…

  • Unscored —

    net/mlx5e: Harden uplink netdev access against device unbind

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5_uplink_netdev_get() gets the uplink netdevice pointer from mdev->mlx5e_res.uplink_netdev. However, the netdevice…

  • Unscored —

    cgroup: split cgroup_destroy_wq into 3 workqueues

    In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues A hung task can occur during [1] LTP cgroup testing when repeatedly mounting/unmounting perf_event and net_prio controllers with systemd.unif…

  • Unscored —

    tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). syzbot reported the splat below where a socket had tcp_sk(sk)->fastopen_rsk in the TCP_ESTABLISHED state. [0] syzbot reused the server…

  • Unscored —

    nexthop: Forbid FDB status change while nexthop is in a group

    In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group The kernel forbids the creation of non-FDB nexthop groups with FDB nexthops: # ip nexthop add id 1 via 192.0.2.1 fdb # ip nexthop…

  • Unscored —

    net: tun: Update napi->skb after XDP process

    In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skb_reset_mac_header include/linux/skbuff.h:3150 [inline] BUG: KASAN: slab-use-a…

  • Unscored —

    mm: swap: check for stable address space before operating on the VMA

    In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unuse_mm() called from swapoff path and accessing it cause…

  • Unscored —

    fs/proc/task_mmu: check p->vec_buf for NULL

    In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: check p->vec_buf for NULL When the PAGEMAP_SCAN ioctl is invoked with vec_len = 0 reaches pagemap_scan_backout_range(), kernel panics with null-ptr-deref: [ 44.936808] Oops:…

  • Unscored —

    tracing: dynevent: Add a missing lockdown check on dynevent

    In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown sta…

  • Unscored —

    pinctrl: check the return value of pinmux_ops::get_function_name()

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback…

  • Unscored —

    Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

    In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effect_compat is embedded twice inside uinput_ff_upload_compat, contains internal padding. In particular, …

  • Unscored —

    Squashfs: fix uninit-value in squashfs_get_parent

    In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug. This is caused by open_by_handle_at() being called with a file handle c…

  • Unscored —

    smb: client: fix crypto buffers in non-linear memory

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory The crypto API, through the scatterlist API, expects input buffers to be in linear memory. We handle this with the cifs_sg_set_buf() helpe…

  • Unscored —

    ptp: Add a upper bound on max_vclocks

    In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against val…

  • Unscored —

    pps: fix warning in pps_register_cdev when register device fail

    In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb01db ("media: v4l2-dev: fix error handling in __video_register_device()"), the release hook …

  • Unscored —

    bpf: Explicitly check accesses to bpf_sock_addr

    In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the following sock_addr program: 0: r0 = 0 1: r2 = *(u32 *)(r1 +60) 2: exit which triggers: verifier bug: e…

  • Unscored —

    nbd: restrict sockets to TCP and UDP

    In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket…

  • Unscored —

    crypto: rng - Ensure set_ent is always present

    In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.

  • Unscored —

    scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()

    In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this …

  • Unscored —

    blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx

    In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx In __blk_mq_update_nr_hw_queues() the return value of blk_mq_sysfs_register_hctxs() is not checked. If sysfs cre…

  • Unscored —

    dm: fix NULL pointer dereference in __dm_suspend()

    In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend …

  • Unscored —

    mm: hugetlb: avoid soft lockup when mprotect to large memory area

    In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect() to a large hugetlb memory area in our customer's workload (~300GB hugetlb memory), soft lockup was ob…

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39816.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39931.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39940.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39946.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39947.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39953.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39955.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39956.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39961.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39963.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39964.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39965.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39967.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39975.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39977.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39980.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39984.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39990.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39992.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39998.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40006.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40009.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40018.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40021.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40024.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40030.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40035.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40044.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40047.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40048.html