Skip to content
OpenAdvisories
High ALAS2023-2025-935 14 CVEs

Important: kernel6.12 security update (Amazon Linux 2023)

Published Apr 9, 2025 · Updated Jun 19, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22023: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid CVE-2025-22022: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints CVE-2025-22021: In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT CVE-2025-22017: In the Linux kernel, the following vulnerability has been resolved: devlink: fix xa_alloc_cyclic() error handling CVE-2025-22015: In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration CVE-2025-22013: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state CVE-2025-22005: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). CVE-2025-22002: In the Linux kernel, the following vulnerability has been resolved: netfs: Call `invalidate_cache` only if implemented CVE-2025-22000: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: drop beyond-EOF folios with the right number of refs CVE-2025-21999: In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() CVE-2025-21997: In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() CVE-2025-21926: In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment CVE-2025-21893: In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() CVE-2024-58092: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization

Fixed packages 22

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-libbpf-debuginfo 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.12.22-27.96 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel6.12 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-aarch64 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-x86_64 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 perf6.12 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 perf6.12-debuginfo 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 python3-perf6.12 0:6.12.22-27.96.amzn2023
Amazon Linux · 2023 python3-perf6.12-debuginfo 0:6.12.22-27.96.amzn2023

Vulnerabilities 14

  • Critical 10.0
    CVE-2025-22021

    netfilter: socket: Lookup orig tuple for IPv6 SNAT

    In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nf_sk_lookup_slow_v4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, to be able to find the righ…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21893

    keys: Fix UAF in key_put()

    In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so key_put() is not allowed to touch the key after t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21926

    net: gso: fix ownership in __udp_gso_segment

    In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment In __udp_gso_segment the skb destructor is removed before segmenting the skb but the socket reference is kept as-is. This is an issue if the origi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21999

    proc: fix UAF in proc_get_inode()

    In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferenc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-22015

    mm/migrate: fix shmem xarray update during migration

    In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio->mapping sho…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-22022

    usb: xhci: Apply the link chain quirk on NEC isoc endpoints

    In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 (one with start/stop bug, one without) were seen to cause IOMMU faults after some …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2025-22013

    KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including: * Host SVE being discard…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2025-21997

    xsk: fix an integer overflow in xp_create_and_assign_umem()

    In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-22000

    mm/huge_memory: drop beyond-EOF folios with the right number of refs

    In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: drop beyond-EOF folios with the right number of refs When an after-split folio is large and needs to be dropped due to EOF, folio_put_refs(folio, folio_nr_pages(folio)) should…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2025-22002

    netfs: Call `invalidate_cache` only if implemented

    In the Linux kernel, the following vulnerability has been resolved: netfs: Call `invalidate_cache` only if implemented Many filesystems such as NFS and Ceph do not implement the `invalidate_cache` method. On those filesystems, if writing to the cache (`NETFS_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2025-22005

    ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

    In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails. Commit 7dd73168e273 ("ipv6: Always alloc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-58092

    nfsd: fix legacy client tracking initialization

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-22017

    devlink: fix xa_alloc_cyclic() error handling

    In the Linux kernel, the following vulnerability has been resolved: devlink: fix xa_alloc_cyclic() error handling In case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will be returned, which will cause IS_ERR() to be false. Which can lead to de…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-22023

    usb: xhci: Don't skip on Stopped - Length Invalid

    In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 ("usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped") in v6.11, the driver didn't skip m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-58092.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21893.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21926.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21997.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21999.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22000.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22002.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22005.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22013.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22015.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22017.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22021.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22022.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22023.html