Skip to content
OpenAdvisories
High ALAS2023-2025-959 15 CVEs

Important: kernel security update (Amazon Linux 2023)

Published May 6, 2025 · Updated Jul 29, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22015: In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration CVE-2025-22005: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). CVE-2025-21999: In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() CVE-2025-21997: In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() CVE-2025-21992: In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera CVE-2025-21986: In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one CVE-2025-21980: In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. CVE-2025-21975: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() CVE-2025-21971: In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT CVE-2025-21970: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check CVE-2025-21964: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option CVE-2025-21963: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option CVE-2025-21962: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option CVE-2025-21959: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() CVE-2024-35866: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key()

Fixed packages 22

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-debuginfo 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-devel 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-headers 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-libbpf 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-libbpf-debuginfo 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-libbpf-devel 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-libbpf-static 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.132-147.221 0:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-tools 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 kernel-tools-devel 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 perf 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 perf-debuginfo 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 python3-perf 0:6.1.132-147.221.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 0:6.1.132-147.221.amzn2023

Vulnerabilities 15

  • High 7.8
    CVE-2025-21970

    net/mlx5: Bridge, fix the crash caused by LAG state check

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEV_CHANGEUPPER event is triggered. Driver finds the lower devices (PFs) to flush all the of…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21971

    net_sched: Prevent creation of classes with TC_H_ROOT

    In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_backlog() uses TC_H_ROOT as a termination condition when traversing up the qdisc tree to update parent bac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21999

    proc: fix UAF in proc_get_inode()

    In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferenc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-22015

    mm/migrate: fix shmem xarray update during migration

    In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio->mapping sho…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2025-21959

    netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Since commit b36e4523d4d5 ("netfilter: nf_conncount: fix garbage collection confirm race"), `cpu` and `jif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21962

    cifs: Fix integer overflow while processing closetimeo mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the va…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21963

    cifs: Fix integer overflow while processing acdirmax mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21964

    cifs: Fix integer overflow while processing acregmax mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21980

    sched: address a potential NULL pointer dereference in the GRED scheduler.

    In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. Thi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21997

    xsk: fix an integer overflow in xp_create_and_assign_umem()

    In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-22005

    ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

    In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails. Commit 7dd73168e273 ("ipv6: Always alloc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-35866

    smb: client: fix potential UAF in cifs_dump_full_key()

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-21975

    net/mlx5: handle errors in mlx5_chains_create_table()

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the return value of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace() must be checked to prevent NULL po…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-21986

    net: switchdev: Convert blocking notification chain to a raw one

    In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chain. The semaphore is acquired for…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-21992

    HID: ignore non-functional sensor in HP 5MP Camera

    In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-function…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-35866.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21959.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21962.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21963.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21964.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21970.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21971.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21975.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21980.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21986.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21992.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21997.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-21999.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22005.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-22015.html