Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-21692: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing CVE-2025-21690: In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service CVE-2024-56703: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn CVE-2024-50304: In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() CVE-2024-50047: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption CVE-2024-50014: In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path CVE-2024-49994: In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.128-136.201 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | perf | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 0:6.1.128-136.201.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 0:6.1.128-136.201.amzn2023 |
Vulnerabilities 7
-
Critical 9.8
smb: client: fix UAF in async decryption
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes with a slab-use-after-free way down in the crypto API. Reproducer: # mount.cifs -o ...,seal,esize=1 //s…
-
High 7.8CVE-2025-21692 Public exploit
net: sched: fix ets qdisc OOB Indexing
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can index an Out-Of-Bound class in ets_class_from_arg() when passed clid of 0. The ov…
-
High 7.5
ipv6: Fix soft lockups in fib6_select_path under high next hop churn
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have been observed on a cluster of Linux-based edge routers located in a highly dynamic environment. Using th…
-
Medium 5.5
scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU…
-
Unscored —
block: fix integer overflow in BLKSECDISCARD
In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered commit 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155 block: fix overflow in blk_ioctl_discard() but for secure erase. Same…
-
Unscored —
ext4: fix access to uninitialised lock in fc replay path
In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enable…
-
Unscored —
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() The per-netns IP tunnel hash table is protected by the RTNL mutex and ip_tunnel_find() is only called from the control pa…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-49994.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50014.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50047.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-50304.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-56703.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21690.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-21692.html