Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-37981: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump CVE-2025-37980: In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path CVE-2025-37978: In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() CVE-2025-37945: In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY CVE-2025-37940: In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() CVE-2025-37892: In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() CVE-2025-37875: In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic CVE-2025-37871: In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall CVE-2025-37867: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc() warning CVE-2025-37863: In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only CVE-2025-37861: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue CVE-2025-37859: In the Linux kernel, the following vulnerability has been resolved: page_pool: avoid infinite loop to schedule delayed worker CVE-2025-37857: In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix array overflow in st_setup() CVE-2025-37856: In the Linux kernel, the following vulnerability has been resolved: btrfs: harden block_group::bg_list against list_del() races CVE-2025-37849: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation CVE-2025-37846: In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation CVE-2025-37844: In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call CVE-2025-37843: In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check CVE-2025-37839: In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check CVE-2025-37837: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() CVE-2025-37836: In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() CVE-2025-37798: In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() CVE-2025-37791: In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() CVE-2025-37789: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action CVE-2025-37786: In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure CVE-2025-37780: In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid CVE-2025-37774: In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page CVE-2025-37773: In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check CVE-2025-37772: In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler CVE-2025-37760: In the Linux kernel, the following vulnerability has been resolved: mm/vma: add give_up_on_oom option on modify/merge, use in uffd release CVE-2025-37756: In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect CVE-2025-37754: In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors CVE-2025-37752: In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation CVE-2025-37750: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel CVE-2025-37747: In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event CVE-2025-37745: In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() CVE-2025-37738: In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end CVE-2025-23163: In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on open CVE-2025-23154: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix io_req_post_cqe abuse by send bundle CVE-2025-23150: In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split CVE-2025-23149: In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended CVE-2025-23147: In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() CVE-2025-23145: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subfl
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-debuginfo | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-devel | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-libbpf-static | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.12.25-32.101 | 0:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel6.12 | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-aarch64 | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-x86_64 | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | perf6.12 | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | perf6.12-debuginfo | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12 | 0:6.12.25-32.101.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12-debuginfo | 0:6.12.25-32.101.amzn2023 |
Vulnerabilities 51
-
Critical 9.8
Revert "smb: client: fix TCP timers deadlock after rmmod"
In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Commit e9f2517a3e18 ("smb: client: fix TCP timers deadlock after rmmod"…
-
Critical 9.8
smb: client: fix UAF in decryption with multichannel
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto only for primary server") and commit b0abcd65ec54 ("smb: client: fix UAF in async…
-
High 8.8
KVM: arm64: Tear down vGIC on failed vCPU creation
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU…
-
High 7.8
bpf: track changes_pkt_data property for global functions
In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the foll…
-
High 7.8
bpf: check changes_pkt_data property for extension programs
In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending…
-
High 7.8
KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when userspace is getting MP state to handle a rather extreme edge case where "acceptin…
-
High 7.8
sctp: detect and prevent references to a freed transport in sendmsg
In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and transports when possible by doing a lookup based on the socket endpoint and the mes…
-
High 7.8
ext4: fix off-by-one error in do_split
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to incorrect splitting in do_split. BUG: KAS…
-
High 7.8
ext4: ignore xattrs past end
In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry. This fixes the following KASAN reported issue: ==================…
-
High 7.8
net_sched: sch_sfq: move the limit validation
In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are c…
-
High 7.8
net: tls: explicitly disallow disconnect
In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric point…
-
High 7.8
slab: ensure slab->obj_exts is clear in a newly allocated slab page
In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page ktest recently reported crashes while running several buffered io tests with __alloc_tagging_slab_alloc_hook() at the top o…
-
High 7.8
net: openvswitch: fix nested key length validation in the set() action
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK …
-
High 7.8
ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() rpl is passed as a pointer to ethtool_cmis_module_poll(), so the correct size of rpl is sizeof(*rpl) which should be just…
-
High 7.8
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() After making all ->qlen_notify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fq_codel_dequ…
-
High 7.8
btrfs: harden block_group::bg_list against list_del() races
In the Linux kernel, the following vulnerability has been resolved: btrfs: harden block_group::bg_list against list_del() races As far as I can tell, these calls of list_del_init() on bg_list cannot run concurrently with btrfs_mark_bg_unused() or btrfs_mark_b…
-
High 7.8
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets them, the task management thread …
-
High 7.5
mptcp: fix NULL pointer in can_accept_new_subflow
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with MPTCP, the kernel panics in 'mptcp_can_accept_new_subflow' because subflow_req->msk is NULL. Call tra…
-
High 7.5
nfsd: decrease sc_count directly if fail to queue dl_recall
In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_stid following a failed dl_recall queue operation: T1 T2 nfs4_laundromat nfs4_ge…
-
Unscored —
nfsd: don't ignore the return code of svc_proc_register()
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel wil…
-
Unscored —
md: fix mddev uaf while iterating all_mddevs list
In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md_notify_reboot() and md_exit(), list_for_each_entry_safe is used, and this can race with deletint the …
-
Unscored —
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ran the repro [0] and waited a few seconds, I observed two LOCKDEP splats: a warning immediately followed by a nul…
-
Unscored —
i3c: Add NULL pointer check in i3c_master_queue_ibi()
In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive an IBI from a target device that has not been probed yet. In such cases, the master calls `i3c_master_q…
-
Unscored —
tpm: do not start chip while suspended
In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call: [35985.503771] i2c i2c-1: Transfer w…
-
Unscored —
io_uring/net: fix io_req_post_cqe abuse by send bundle
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix io_req_post_cqe abuse by send bundle [ 114.987980][ T5313] WARNING: CPU: 6 PID: 5313 at io_uring/io_uring.c:872 io_req_post_cqe+0x12e/0x4f0 [ 114.991597][ T5313] RIP: 0010:i…
-
Unscored —
net: vlan: don't propagate flags on open
In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on open With the device instance lock, there is now a possibility of a deadlock: [ 1.211455] ============================================ [ 1.211571] WARNING:…
-
Unscored —
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() syzbot reported a deadlock in lock_system_sleep() (see below). The write operation to "/sys/module/hibernate/parameters/compr…
-
Unscored —
perf: Fix hang while freeing sigtrap event
In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred signal hadn't managed to be sent before the file got closed: perf_event_overflow()…
-
Unscored —
drm/i915/huc: Fix fence not released on early probe errors
In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered…
-
Unscored —
mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
In the Linux kernel, the following vulnerability has been resolved: mm/vma: add give_up_on_oom option on modify/merge, use in uffd release Currently, if a VMA merge fails due to an OOM condition arising on commit merge or a failure to duplicate anon_vma's, we…
-
Unscored —
RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler struct rdma_cm_id has member "struct work_struct net_work" that is reused for enqueuing cma_netevent_work_handler()s onto cma_wq. Be…
-
Unscored —
virtiofs: add filesystem context source name check
In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check In certain scenarios, for example, during fuzz testing, the source name may be NULL, which could lead to a kernel panic. Therefore, an extra…
-
Unscored —
isofs: Prevent the use of too small fid
In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofs_fh_to_parent. [1] The handle_bytes value passed in by the reproducing program is equal to 12. In han…
-
Unscored —
net: dsa: free routing table on probe failure
In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it means that we are the last switch of the tree which is successfully probing, and we should be setting …
-
Unscored —
PCI: Fix reference leak in pci_register_host_bridge()
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call put_device() to give up the reference to avoid a memory leak, per the comment at device_register(). Foun…
-
Unscored —
iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() Two WARNINGs are observed when SMMU driver rolls back upon failure: arm-smmu-v3.9.auto: Failed to register iommu arm-smmu-v3.9.a…
-
Unscored —
jbd2: remove wrong sb->s_sequence check
In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence == 0 but rather by sb->s_start == 0 (which is set a few lines above). Furthermore 0 is a valid tr…
-
Unscored —
PCI: pciehp: Avoid unnecessary device replacement check
In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check Hot-removal of nested PCI hotplug ports suffers from a long-standing race condition which can lead to a deadlock: A parent hotplug port…
-
Unscored —
cifs: avoid NULL pointer dereference in dbg call
In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifs_server_dbg() implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Ce…
-
Unscored —
arm64: mops: Do not dereference src reg for a set operation
In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET* and reading it can result in a UBSAN out-of-bounds array access error, specifically when t…
-
Unscored —
scsi: st: Fix array overflow in st_setup()
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix array overflow in st_setup() Change the array size to follow parms size instead of a fixed value.
-
Unscored —
page_pool: avoid infinite loop to schedule delayed worker
In the Linux kernel, the following vulnerability has been resolved: page_pool: avoid infinite loop to schedule delayed worker We noticed the kworker in page_pool_release_retry() was waken up repeatedly and infinitely in production because of the buggy driver …
-
Unscored —
ovl: don't allow datadir only
In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers wer…
-
Unscored —
RDMA/core: Silence oversized kvmalloc() warning
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc() warning syzkaller triggered an oversized kvmalloc() warning. Silence it by adding __GFP_NOWARN. syzkaller log: WARNING: CPU: 7 PID: 518 at mm/util.c:66…
-
Unscored —
igc: fix PTM cycle trigger logic
In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status 'valid' bit while the PTM cycle is triggered results in unreliable PTM operation. To fix this, clear the PTM 'trigger' and sta…
-
Unscored —
mtd: inftlcore: Add error check for inftl_read_oob()
In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwriteunit(), the return value of inftl_read_oob() need to be checked. A proper implementation can be found in INFTL_deleteblo…
-
Unscored —
ftrace: Add cond_resched() to ftrace_graph_set_hash()
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of time to ex…
-
Unscored —
net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsa_switch_suspend() and dsa_switch_resume() from their de…
-
Unscored —
block: integrity: Do not call set_page_dirty_lock()
In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() Placing multiple protection information buffers inside the same page can lead to oopses because set_page_dirty_lock() can't be called from …
-
Unscored —
block: fix resource leak in blk_register_queue() error path
In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function later encounters an error, we need to c…
-
Unscored —
scsi: smartpqi: Use is_kdump_kernel() to check for kdump
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump The smartpqi driver checks the reset_devices variable to determine whether special adjustments need to be made for kdump. This has the…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-58098.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-58100.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-22026.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-22077.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-22126.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23141.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23142.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23143.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23145.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23147.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23149.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23150.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23154.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-23163.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37738.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37745.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37747.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37750.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37752.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37754.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37756.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37760.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37772.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37773.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37774.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37780.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37786.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37789.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37791.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-37798.html