# ALAS2023-2025-1050: Security update for 22 packages

ALAS2023-2025-1050, released June 26, 2025, fixes 72 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-1050
- Platform: Linux
- Released: Jun 26, 2025
- Priority: High (Closes CVE-2024-38541, high severity)
- CVEs: 72, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-1050.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel-libbpf-debuginfo.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-livepatch-6.1.140-154.222](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.140-154.222.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.140-154.222.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-38541](https://patchblox.com/security/data/cve/CVE-2024-38541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 |  |
| [CVE-2025-37928](https://patchblox.com/security/data/cve/CVE-2025-37928.md) | High | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 |  |
| [CVE-2025-38018](https://patchblox.com/security/data/cve/CVE-2025-38018.md) | High | kernel-64kb: net/tls: fix kernel panic when alloc_page failed (bsc#1244999). | 7.0 | 0.0048 |  |
| [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 |  |
| [CVE-2025-37885](https://patchblox.com/security/data/cve/CVE-2025-37885.md) | High | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 |  |
| [CVE-2025-37752](https://patchblox.com/security/data/cve/CVE-2025-37752.md) | High | kernel-64kb: net_sched: sch_sfq: move the limit validation (bsc#1242504). | 7.8 | 0.0030 |  |
| [CVE-2025-37927](https://patchblox.com/security/data/cve/CVE-2025-37927.md) | High | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 |  |
| [CVE-2024-26739](https://patchblox.com/security/data/cve/CVE-2024-26739.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 |  |
| [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-37923](https://patchblox.com/security/data/cve/CVE-2025-37923.md) | High | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 |  |
| [CVE-2025-37913](https://patchblox.com/security/data/cve/CVE-2025-37913.md) | High | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 |  |
| [CVE-2025-37921](https://patchblox.com/security/data/cve/CVE-2025-37921.md) | High | vxlan: vnifilter: Fix unlocked deletion of default FDB entry | 7.8 | 0.0024 |  |
| [CVE-2024-50063](https://patchblox.com/security/data/cve/CVE-2024-50063.md) | High | kernel-64kb: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435). | 7.8 | 0.0023 |  |
| [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 |  |
| [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-38023](https://patchblox.com/security/data/cve/CVE-2025-38023.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 |  |
| [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 |  |
| [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 |  |
| [CVE-2025-37915](https://patchblox.com/security/data/cve/CVE-2025-37915.md) | High | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 |  |
| [CVE-2025-37963](https://patchblox.com/security/data/cve/CVE-2025-37963.md) | High | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0022 |  |
| [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 |  |
| [CVE-2025-37890](https://patchblox.com/security/data/cve/CVE-2025-37890.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 |  |
| [CVE-2025-37995](https://patchblox.com/security/data/cve/CVE-2025-37995.md) | High | module: ensure that kobject_put() is safe for module type kobjects | 7.0 | 0.0022 |  |
| [CVE-2025-37936](https://patchblox.com/security/data/cve/CVE-2025-37936.md) | High | perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. | 7.0 | 0.0022 |  |
| [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 |  |
| [CVE-2025-37738](https://patchblox.com/security/data/cve/CVE-2025-37738.md) | High | ext4: ignore xattrs past end | 7.8 | 0.0022 |  |
| [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 |  |
| [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 |  |
| [CVE-2025-37948](https://patchblox.com/security/data/cve/CVE-2025-37948.md) | High | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 7.0 | 0.0021 |  |
| [CVE-2025-37964](https://patchblox.com/security/data/cve/CVE-2025-37964.md) | High | kernel-uek: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Dave Hansen) [Orabug: 37977013] | 7.0 | 0.0021 |  |
| [CVE-2025-37938](https://patchblox.com/security/data/cve/CVE-2025-37938.md) | High | tracing: Verify event formats that have "%*p.." | 7.8 | 0.0021 |  |
| [CVE-2025-22126](https://patchblox.com/security/data/cve/CVE-2025-22126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 |  |
| [CVE-2025-38020](https://patchblox.com/security/data/cve/CVE-2025-38020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-37997](https://patchblox.com/security/data/cve/CVE-2025-37997.md) | High | netfilter: ipset: fix region locking in hash types | 7.0 | 0.0018 |  |
| [CVE-2025-37940](https://patchblox.com/security/data/cve/CVE-2025-37940.md) | High | ftrace: Add cond_resched() to ftrace_graph_set_hash() | 7.0 | 0.0016 |  |
| [CVE-2025-37871](https://patchblox.com/security/data/cve/CVE-2025-37871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0079 |  |
| [CVE-2025-23145](https://patchblox.com/security/data/cve/CVE-2025-23145.md) | Routine | mptcp: fix NULL pointer in can_accept_new_subflow | 5.5 | 0.0059 |  |
| [CVE-2025-37820](https://patchblox.com/security/data/cve/CVE-2025-37820.md) | Routine | xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() | 5.5 | 0.0040 |  |
| [CVE-2025-37959](https://patchblox.com/security/data/cve/CVE-2025-37959.md) | Routine | bpf: Scrub packet on bpf_redirect_peer | 5.5 | 0.0038 |  |
| [CVE-2025-37836](https://patchblox.com/security/data/cve/CVE-2025-37836.md) | Routine | PCI: Fix reference leak in pci_register_host_bridge() | 5.5 | 0.0031 |  |
| [CVE-2025-37857](https://patchblox.com/security/data/cve/CVE-2025-37857.md) | Routine | scsi: st: Fix array overflow in st_setup() | 5.5 | 0.0031 |  |
| [CVE-2025-37859](https://patchblox.com/security/data/cve/CVE-2025-37859.md) | Routine | page_pool: avoid infinite loop to schedule delayed worker | 5.5 | 0.0031 |  |
| [CVE-2025-37867](https://patchblox.com/security/data/cve/CVE-2025-37867.md) | Routine | RDMA/core: Silence oversized kvmalloc() warning | 5.5 | 0.0031 |  |
| [CVE-2025-22062](https://patchblox.com/security/data/cve/CVE-2025-22062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37756](https://patchblox.com/security/data/cve/CVE-2025-37756.md) | Routine | net: tls: explicitly disallow disconnect | 5.5 | 0.0030 |  |
| [CVE-2025-37844](https://patchblox.com/security/data/cve/CVE-2025-37844.md) | Routine | cifs: avoid NULL pointer dereference in dbg call | 5.5 | 0.0030 |  |
| [CVE-2025-37875](https://patchblox.com/security/data/cve/CVE-2025-37875.md) | Routine | igc: fix PTM cycle trigger logic | 5.5 | 0.0029 |  |
| [CVE-2025-37998](https://patchblox.com/security/data/cve/CVE-2025-37998.md) | Routine | openvswitch: Fix unsafe attribute parsing in output_userspace() | 5.5 | 0.0027 |  |
| [CVE-2024-46751](https://patchblox.com/security/data/cve/CVE-2024-46751.md) | Routine | dtb-aarch64: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786). | 5.5 | 0.0026 |  |
| [CVE-2024-36908](https://patchblox.com/security/data/cve/CVE-2024-36908.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-26783](https://patchblox.com/security/data/cve/CVE-2024-26783.md) | Routine | dtb-aarch64: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615). | 5.5 | 0.0024 |  |
| [CVE-2024-36903](https://patchblox.com/security/data/cve/CVE-2024-36903.md) | Routine | kernel-uek64k: ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [Orabug: 36683284] | 5.5 | 0.0024 |  |
| [CVE-2025-37949](https://patchblox.com/security/data/cve/CVE-2025-37949.md) | Routine | kernel-64kb: xenbus: Use kref to track req lifetime (bsc#1243541). | 5.5 | 0.0024 |  |
| [CVE-2025-22013](https://patchblox.com/security/data/cve/CVE-2025-22013.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-37932](https://patchblox.com/security/data/cve/CVE-2025-37932.md) | Routine | sch_htb: make htb_qlen_notify() idempotent | 5.5 | 0.0024 |  |
| [CVE-2024-43840](https://patchblox.com/security/data/cve/CVE-2024-43840.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-37992](https://patchblox.com/security/data/cve/CVE-2025-37992.md) | Routine | net_sched: Flush gso_skb list too during ->change() | 5.5 | 0.0022 |  |
| [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 |  |
| [CVE-2025-23147](https://patchblox.com/security/data/cve/CVE-2025-23147.md) | Routine | i3c: Add NULL pointer check in i3c_master_queue_ibi() | 5.5 | 0.0021 |  |
| [CVE-2025-37808](https://patchblox.com/security/data/cve/CVE-2025-37808.md) | Routine | crypto: null - Use spin lock instead of mutex | 5.5 | 0.0021 |  |
| [CVE-2025-37884](https://patchblox.com/security/data/cve/CVE-2025-37884.md) | Routine | bpf: Fix deadlock between rcu_tasks_trace and event_mutex. | 5.5 | 0.0021 |  |
| [CVE-2025-37772](https://patchblox.com/security/data/cve/CVE-2025-37772.md) | Routine | RDMA/cma: Fix workqueue crash in cma_netevent_work_handler | 5.5 | 0.0020 |  |
| [CVE-2025-37773](https://patchblox.com/security/data/cve/CVE-2025-37773.md) | Routine | virtiofs: add filesystem context source name check | 5.5 | 0.0020 |  |
| [CVE-2025-37961](https://patchblox.com/security/data/cve/CVE-2025-37961.md) | Routine | ipvs: fix uninit-value for saddr in do_output_route4 | 6.5 | 0.0019 |  |
| [CVE-2024-36927](https://patchblox.com/security/data/cve/CVE-2024-36927.md) | Routine | kernel-uek: ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [Orabug: 36683410] | 5.5 | 0.0018 |  |
| [CVE-2024-46733](https://patchblox.com/security/data/cve/CVE-2024-46733.md) | Routine | kernel-64kb: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). | 5.5 | 0.0017 |  |
| [CVE-2025-21931](https://patchblox.com/security/data/cve/CVE-2025-21931.md) | Routine | kernel-64kb: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709). | 5.5 | 0.0016 |  |
| [CVE-2025-23163](https://patchblox.com/security/data/cve/CVE-2025-23163.md) | Routine | net: vlan: don't propagate flags on open | 5.5 | 0.0016 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.