Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68321: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations CVE-2025-68317: In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts CVE-2025-68313: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 CVE-2025-68311: In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for probing CVE-2025-68191: In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() CVE-2025-68188: In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() CVE-2025-68186: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up CVE-2025-68185: In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing CVE-2025-68183: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr CVE-2025-68178: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configuring policy CVE-2025-68177: In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit CVE-2025-68173: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable CVE-2025-68171: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery CVE-2025-68167: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs CVE-2025-40363: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output CVE-2025-40362: In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue CVE-2025-40360: In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset CVE-2025-40359: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds warning CVE-2025-40357: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_diag_dump CVE-2025-40353: In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copy_highpage() CVE-2025-40350: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ CVE-2025-40348: In the Linux kernel, the following vulnerability has been resolved: slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts CVE-2025-40346: In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() CVE-2025-40341: In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race CVE-2025-40331: In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write CVE-2025-40329: In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb CVE-2025-40328: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_close_cached_fid() CVE-2025-40324: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() CVE-2025-40323: In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fb_display[i]->mode to NULL when the mode is released CVE-2025-40322: In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* CVE-2025-40320: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound CVE-2025-40319: In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer CVE-2025-40317: In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls CVE-2025-40313: In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files CVE-2025-40307: In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap CVE-2025-40304: In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds CVE-2025-40303: In the Linux kernel, the following vulnerability has been resolved: btrfs: ensure no dirty metadata is written back for an fs with errors CVE-2025-40302: In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy fileio is active CVE-2025-40297: In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass CVE-2025-40293: In the Linux kernel, the following vulnerability has been resolved: iommufd: Don't overflow during division for dirty tracking CVE-2025-40292: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packets CVE-2025-40240: In the Linux kernel, the following vulnerability has been resolved
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.12 | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | bpftool6.12-debuginfo | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.12.58-82.121 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.12 | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-aarch64 | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-x86_64 | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-devel | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-headers | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-debuginfo | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-devel | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-static | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra-common | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-debuginfo | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-devel | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | perf6.12 | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | perf6.12-debuginfo | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12 | 1:6.12.58-82.121.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12-debuginfo | 1:6.12.58-82.121.amzn2023 |
Vulnerabilities 50
-
Critical 9.8
smb: client: fix potential cfid UAF in smb2_query_info_compound
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound When smb2_query_info_compound() retries, a previously allocated cfid may have been freed in the first attempt. Because cfid was…
-
Critical 9.8
net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ XDP programs can change the layout of an xdp_buff through bpf_xdp_adjust_tail() and bpf_xdp_adjust_head(). Therefore…
-
High 8.8
smb: client: fix potential UAF in smb2_close_cached_fid()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_close_cached_fid() find_or_create_cached_dir() could grab a new reference after kref_put() had seen the refcount drop to zero but before cfid_list_lock …
-
High 8.8
ceph: fix multifs mds auth caps issue
In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fsname along with the associated caps. Not doing so would result in applying the mds auth caps of one fs…
-
High 8.4
virtio-net: fix received length check in big packets
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packets Since commit 4959aebba8c0 ("virtio-net: use mtu size as buffer length for big packets"), when guest gso is off, the allocated size for big…
-
High 7.8
net: bridge: fix use-after-free due to MST port state bypass
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported[1] a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening a…
-
High 7.8
media: videobuf2: forbid remove_bufs when legacy fileio is active
In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy fileio is active vb2_ioctl_remove_bufs() call manipulates queue internal buffer list, potentially overwriting some pointers used by the legacy…
-
High 7.8
btrfs: ensure no dirty metadata is written back for an fs with errors
In the Linux kernel, the following vulnerability has been resolved: btrfs: ensure no dirty metadata is written back for an fs with errors [BUG] During development of a minor feature (make sure all btrfs_bio::end_io() is called in task context), I noticed a cr…
-
High 7.8
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if t…
-
High 7.8
exfat: validate cluster allocation bits of the allocation bitmap
In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitm…
-
High 7.8
regmap: slimbus: fix bus_context pointer in regmap init calls
In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls Commit 4e65bda8273c ("ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()") revealed the problem in the slimbus regma…
-
High 7.8
bpf: Sync pending IRQ work before freeing ring buffer
In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race where irq_work can be queued in bpf_ringbuf_commit() but the ring buffer is freed before the work executes. In the syzbot repr…
-
High 7.8
fbcon: Set fb_display[i]->mode to NULL when the mode is released
In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fb_display[i]->mode to NULL when the mode is released Recently, we discovered the following issue through syzkaller: BUG: KASAN: slab-use-after-free in fb_mode_is_equal+0x285/0x2f0…
-
High 7.8
sctp: Prevent TOCTOU out-of-bounds write
In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock, sctp_diag_dump() -> sctp_for_each_endpoint() -> sctp_ep_dump() make sure not to exceed bounds in cas…
-
High 7.8
gpiolib: fix invalid pointer access in debugfs
In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs If the memory allocation in gpiolib_seq_start() fails, the s->private field remains uninitialized and is later dereferenced without checking in …
-
High 7.8
x86/fpu: Ensure XFD state on signal delivery
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Sean reported [1] the following splat when running KVM tests: WARNING: CPU: 232 PID: 15391 at xfd_validate_state+0x65/0x70 Call Trace: <TASK> fpu_…
-
High 7.8
ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores …
-
High 7.8
io_uring/zctx: check chained notif contexts
In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same context. There are some ambiguous syz reports, so let's check the assumption on noti…
-
High 7.5
sctp: avoid NULL dereference when chunk data buffer is missing
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk->skb can only be NULL if chunk->he…
-
High 7.5
NFSD: Fix crash in nfsd4_read_release()
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.
-
High 7.5
page_pool: always add GFP_NOWARN for ATOMIC allocations
In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of li…
-
High 7.1
fbdev: bitblit: bound-check glyph index in bit_putcs*
In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointer from the character value masked by 0xff/0x1ff, which may exceed the actual font…
-
High 7.1
x86/CPU/AMD: Add RDSEED fix for Zen5
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness…
-
Unscored —
net/sched: sch_qfq: Fix null-deref in agg_dequeue
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue To prevent a potential crash in agg_dequeue (net/sched/sch_qfq.c) when cl->qdisc->ops->peek(cl->qdisc) returns NULL, we check the return valu…
-
Unscored —
btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation When btrfs_add_qgroup_relation() is called with invalid qgroup levels (src >= dst), the function returns -EINVAL directly wi…
-
Unscored —
ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpi_video_switch_brightness() The switch_brightness_work delayed work accesses device->brightness and device->backlight, freed by acpi_video_dev_unregister…
-
Unscored —
mm: prevent poison consumption when splitting THP
In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting THP When performing memory error injection on a THP (Transparent Huge Page) mapped to userspace on an x86 server, the kernel panics with the foll…
-
Unscored —
vsock: fix lock inversion in vsock_assign_transport()
In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transport() Syzbot reported a potential lock inversion deadlock between vsock_register_mutex and sk_lock-AF_VSOCK when vsock_linger() is called. The …
-
Unscored —
btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()
In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() If fs_info->super_copy or fs_info->super_for_commit allocated failed in btrfs_get_tree_subvol(), then no need …
-
Unscored —
fs/notify: call exportfs_encode_fid with s_umount
In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfs_encode_fid with s_umount Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.…
-
Unscored —
net/mlx5: Fix IPsec cleanup over MPV device
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When we do mlx5e_detach_netdev() we eventually disable blocking events notifier, among those events are IPsec MPV events from IB to core. So before…
-
Unscored —
iommufd: Don't overflow during division for dirty tracking
In the Linux kernel, the following vulnerability has been resolved: iommufd: Don't overflow during division for dirty tracking If pgshift is 63 then BITS_PER_TYPE(*bitmap->bitmap) * pgsize will overflow to 0 and this triggers divide by 0. In this case the ind…
-
Unscored —
ntfs3: pretend $Extend records as regular files
In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IF…
-
Unscored —
drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb The Mesa issue referenced below pointed out a possible deadlock: [ 1231.611031] Possible interrupt unsafe locking scenario: [ 1231.611…
-
Unscored —
futex: Don't leak robust_list pointer on exec race
In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race sys_get_robust_list() and compat_get_robust_list() use ptrace_may_access() to check if the calling task is allowed to access another task's …
-
Unscored —
arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() Fix incorrect use of PTR_ERR_OR_ZERO() in topology_parse_cpu_capacity() which causes the code to proceed with NULL cl…
-
Unscored —
slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts
In the Linux kernel, the following vulnerability has been resolved: slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts If two competing threads enter alloc_slab_obj_exts() and one of them fails to allocate the object extension vector, it might override…
-
Unscored —
arm64: mte: Do not warn if the page is already tagged in copy_highpage()
In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copy_highpage() The arm64 copy_highpage() assumes that the destination page is newly allocated and not MTE-tagged (PG_mte_tagged unset…
-
Unscored —
net/smc: fix general protection fault in __smc_diag_dump
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_diag_dump The syzbot report a crash: Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN …
-
Unscored —
perf/x86/intel: Fix KASAN global-out-of-bounds warning
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds warning When running "perf mem record" command on CWF, the below KASAN global-out-of-bounds warning is seen. ===================================…
-
Unscored —
drm/sysfb: Do not dereference NULL pointer in plane reset
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset h…
-
Unscored —
net: ipv6: fix field-spanning memcpy warning in AH output
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output Fix field-spanning memcpy warnings in ah6_output() and ah6_output_done() where extension headers are copied to/from IPv6 address fiel…
-
Unscored —
ftrace: Fix softlockup in ftrace_module_enable
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable A soft lockup was observed when loading amdgpu module. If a module has a lot of tracable functions, multiple calls to kallsyms_lookup can spend …
-
Unscored —
cpufreq/longhaul: handle NULL policy in longhaul_exit
In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL der…
-
Unscored —
blk-cgroup: fix possible deadlock while configuring policy
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configuring policy Following deadlock can be triggered easily by lockdep: WARNING: possible circular locking dependency detected 6.17.0-rc3-00124-ga12c…
-
Unscored —
nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might beco…
-
Unscored —
ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up The function ring_buffer_map_get_reader() is a bit more strict than the other get reader functions, and except …
-
Unscored —
tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags.
-
Unscored —
udp_tunnel: use netdev_warn() instead of netdev_WARN()
In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to print a backtrace along with file and line information. In this case, udp_tunnel_nic_register() retur…
-
Unscored —
tty: serial: ip22zilog: Use platform device for probing
In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for probing After commit 84a9582fd203 ("serial: core: Start managing serial controllers to enable runtime PM") serial drivers need to provide a dev…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40083.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40209.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40211.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40230.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40231.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40235.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40237.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40238.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40240.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40292.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40293.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40297.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40302.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40303.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40304.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40307.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40313.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40317.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40319.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40320.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40322.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40323.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40324.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40328.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40329.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40331.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40341.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40346.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40348.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-40350.html