# ALAS2023-2025-1186: Security update for 22 packages

ALAS2023-2025-1186, released September 10, 2025, fixes 54 CVEs across 22 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-1186
- Platform: Linux
- Released: Sep 10, 2025
- Priority: Patch now (Closes CVE-2025-39682, exploited (CISA KEV))
- CVEs: 54, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-1186.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel-libbpf-debuginfo.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-livepatch-6.1.150-174.273](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.150-174.273.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 1:6.1.150-174.273.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-39682](https://patchblox.com/security/data/cve/CVE-2025-39682.md) | Patch now | tls: fix handling of zero-length records on the rx_list | 9.8 | 0.0331 | CISA KEV |
| [CVE-2025-37750](https://patchblox.com/security/data/cve/CVE-2025-37750.md) | High | smb: client: fix UAF in decryption with multichannel | 7.8 | 0.0050 |  |
| [CVE-2025-39702](https://patchblox.com/security/data/cve/CVE-2025-39702.md) | High | ipv6: sr: Fix MAC comparison to be constant-time | 7.1 | 0.0045 |  |
| [CVE-2025-38676](https://patchblox.com/security/data/cve/CVE-2025-38676.md) | High | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 7.8 | 0.0042 |  |
| [CVE-2025-38724](https://patchblox.com/security/data/cve/CVE-2025-38724.md) | High | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | 7.8 | 0.0041 |  |
| [CVE-2025-38708](https://patchblox.com/security/data/cve/CVE-2025-38708.md) | High | drbd: add missing kref_get in handle_write_conflicts | 7.8 | 0.0040 |  |
| [CVE-2025-38728](https://patchblox.com/security/data/cve/CVE-2025-38728.md) | High | smb3: fix for slab out of bounds on mount to ksmbd | 7.1 | 0.0036 |  |
| [CVE-2025-38552](https://patchblox.com/security/data/cve/CVE-2025-38552.md) | High | mptcp: plug races between subflow fail and subflow creation | 7.8 | 0.0035 |  |
| [CVE-2024-58240](https://patchblox.com/security/data/cve/CVE-2024-58240.md) | High | tls: separate no-async decryption request handling from async | 7.8 | 0.0034 |  |
| [CVE-2025-39673](https://patchblox.com/security/data/cve/CVE-2025-39673.md) | High | ppp: fix race conditions in ppp_fill_forward_path | 7.0 | 0.0032 |  |
| [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 |  |
| [CVE-2025-38491](https://patchblox.com/security/data/cve/CVE-2025-38491.md) | High | mptcp: make fallback action and fallback decision atomic | 7.0 | 0.0024 |  |
| [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 |  |
| [CVE-2025-38614](https://patchblox.com/security/data/cve/CVE-2025-38614.md) | High | eventpoll: Fix semi-unbounded recursion | 7.5 | 0.0020 |  |
| [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 |  |
| [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0019 |  |
| [CVE-2025-39689](https://patchblox.com/security/data/cve/CVE-2025-39689.md) | High | ftrace: Also allocate and copy hash for reading of filter files | 7.8 | 0.0019 |  |
| [CVE-2025-39683](https://patchblox.com/security/data/cve/CVE-2025-39683.md) | High | tracing: Limit access to parser->buffer when trace_get_user failed | 7.1 | 0.0019 |  |
| [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 |  |
| [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0019 |  |
| [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 |  |
| [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 |  |
| [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 |  |
| [CVE-2025-38732](https://patchblox.com/security/data/cve/CVE-2025-38732.md) | High | netfilter: nf_reject: don't leak dst refcount for loopback packets | 7.0 | 0.0018 |  |
| [CVE-2025-39738](https://patchblox.com/security/data/cve/CVE-2025-39738.md) | High | btrfs: do not allow relocation of partially dropped subvolumes | 7.8 | 0.0018 |  |
| [CVE-2025-39823](https://patchblox.com/security/data/cve/CVE-2025-39823.md) | High | KVM: x86: use array_index_nospec with indices that come from guest | 7.8 | 0.0018 |  |
| [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0018 |  |
| [CVE-2025-38707](https://patchblox.com/security/data/cve/CVE-2025-38707.md) | High | fs/ntfs3: Add sanity check for file name | 7.8 | 0.0018 |  |
| [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 |  |
| [CVE-2025-39835](https://patchblox.com/security/data/cve/CVE-2025-39835.md) | High | xfs: do not propagate ENODATA disk errors into xattr code | 7.8 | 0.0017 |  |
| [CVE-2025-39718](https://patchblox.com/security/data/cve/CVE-2025-39718.md) | High | vsock/virtio: Validate length in packet header before skb_put() | 7.8 | 0.0017 |  |
| [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 |  |
| [CVE-2025-39817](https://patchblox.com/security/data/cve/CVE-2025-39817.md) | High | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 |  |
| [CVE-2025-38670](https://patchblox.com/security/data/cve/CVE-2025-38670.md) | High | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | 7.1 | 0.0017 |  |
| [CVE-2025-39697](https://patchblox.com/security/data/cve/CVE-2025-39697.md) | High | NFS: Fix a race when updating an existing write | 7.6 | 0.0016 |  |
| [CVE-2025-39819](https://patchblox.com/security/data/cve/CVE-2025-39819.md) | High | fs/smb: Fix inconsistent refcnt update | 7.6 | 0.0015 |  |
| [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 |  |
| [CVE-2025-39825](https://patchblox.com/security/data/cve/CVE-2025-39825.md) | High | smb: client: fix race with concurrent opens in rename(2) | 7.6 | 0.0012 |  |
| [CVE-2025-39770](https://patchblox.com/security/data/cve/CVE-2025-39770.md) | Routine | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0039 |  |
| [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 |  |
| [CVE-2025-39756](https://patchblox.com/security/data/cve/CVE-2025-39756.md) | Routine | fs: Prevent file descriptor table allocations exceeding INT_MAX | 5.5 | 0.0019 |  |
| [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39681](https://patchblox.com/security/data/cve/CVE-2025-39681.md) | Routine | x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | 5.5 | 0.0018 |  |
| [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 |  |
| [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 |  |
| [CVE-2025-39812](https://patchblox.com/security/data/cve/CVE-2025-39812.md) | Routine | sctp: initialize more fields in sctp_v6_from_sk() | 5.5 | 0.0018 |  |
| [CVE-2025-39795](https://patchblox.com/security/data/cve/CVE-2025-39795.md) | Routine | block: avoid possible overflow for chunk_sectors check in blk_stack_limits() | 5.5 | 0.0017 |  |
| [CVE-2025-39800](https://patchblox.com/security/data/cve/CVE-2025-39800.md) | Routine | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 5.5 | 0.0016 |  |
| [CVE-2025-39736](https://patchblox.com/security/data/cve/CVE-2025-39736.md) | Routine | mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock | 5.5 | 0.0014 |  |
| [CVE-2025-39782](https://patchblox.com/security/data/cve/CVE-2025-39782.md) | Routine | kernel-64kb: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526). | 5.5 | 0.0014 |  |
| [CVE-2025-38681](https://patchblox.com/security/data/cve/CVE-2025-38681.md) | Routine | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | 5.5 | 0.0014 |  |
| [CVE-2025-39773](https://patchblox.com/security/data/cve/CVE-2025-39773.md) | Routine | net: bridge: fix soft lockup in br_multicast_query_expired() | 5.5 | 0.0013 |  |
| [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.