# ALAS2023-2025-802: Security update for 21 packages

ALAS2023-2025-802, released January 16, 2025, fixes 56 CVEs across 21 products. One of them is being exploited (CVE-2024-50302); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-802
- Platform: Linux
- Released: Jan 16, 2025
- Priority: Patch now (Closes CVE-2024-50302, exploited (CISA KEV))
- CVEs: 56, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-802.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-livepatch-6.1.119-129.201](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.119-129.201.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.119-129.201.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-50302](https://patchblox.com/security/data/cve/CVE-2024-50302.md) | Patch now | kernel-64kb: Security update for the Linux Kernel | 6.4 | 0.0081 | CISA KEV |
| [CVE-2024-53095](https://patchblox.com/security/data/cve/CVE-2024-53095.md) | Urgent | kernel-azure: Security update for the Linux Kernel | 9.8 | 0.0058 |  |
| [CVE-2024-49996](https://patchblox.com/security/data/cve/CVE-2024-49996.md) | High | kernel-64kb: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089). | 7.8 | 0.0078 |  |
| [CVE-2024-50264](https://patchblox.com/security/data/cve/CVE-2024-50264.md) | High | kernel-64kb: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453). | 7.8 | 0.0035 |  |
| [CVE-2024-53096](https://patchblox.com/security/data/cve/CVE-2024-53096.md) | High | kernel-coco: Security update for the Linux Kernel | 7.8 | 0.0034 |  |
| [CVE-2024-53057](https://patchblox.com/security/data/cve/CVE-2024-53057.md) | High | kernel-64kb: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551). | 7.8 | 0.0029 |  |
| [CVE-2024-49960](https://patchblox.com/security/data/cve/CVE-2024-49960.md) | High | kernel-64kb: ext4: fix timer use-after-free on failed mount (bsc#1232395). | 7.8 | 0.0029 |  |
| [CVE-2024-50301](https://patchblox.com/security/data/cve/CVE-2024-50301.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2024-49974](https://patchblox.com/security/data/cve/CVE-2024-49974.md) | High | kernel-64kb: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383). | 7.5 | 0.0028 |  |
| [CVE-2024-50262](https://patchblox.com/security/data/cve/CVE-2024-50262.md) | High | kernel-64kb: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239). | 7.8 | 0.0027 |  |
| [CVE-2024-50278](https://patchblox.com/security/data/cve/CVE-2024-50278.md) | High | dtb-aarch64: CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469). | 7.1 | 0.0026 |  |
| [CVE-2024-50279](https://patchblox.com/security/data/cve/CVE-2024-50279.md) | High | kernel-default: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468). | 7.1 | 0.0026 |  |
| [CVE-2024-50257](https://patchblox.com/security/data/cve/CVE-2024-50257.md) | High | kernel-64kb: netfilter: Fix use-after-free in get_info() (bsc#1233244). | 7.8 | 0.0026 |  |
| [CVE-2024-50280](https://patchblox.com/security/data/cve/CVE-2024-50280.md) | High | kernel-azure: CVE-2024-50278, dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467). | 7.8 | 0.0025 |  |
| [CVE-2024-53119](https://patchblox.com/security/data/cve/CVE-2024-53119.md) | High | kernel-coco_debug: virtio/vsock: Fix accept_queue memory leak (bsc#1234073). | 7.8 | 0.0025 |  |
| [CVE-2024-50036](https://patchblox.com/security/data/cve/CVE-2024-50036.md) | High | kernel-64kb: net: do not delay dst_entries_add() in dst_release() (bsc#1231912). | 7.0 | 0.0025 |  |
| [CVE-2024-53082](https://patchblox.com/security/data/cve/CVE-2024-53082.md) | High | kernel-azure: virtio_net: Add hash_key_length check (bsc#1233573). | 7.1 | 0.0024 |  |
| [CVE-2024-53106](https://patchblox.com/security/data/cve/CVE-2024-53106.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53135](https://patchblox.com/security/data/cve/CVE-2024-53135.md) | High | kernel-64kb: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154). | 7.8 | 0.0024 |  |
| [CVE-2024-53103](https://patchblox.com/security/data/cve/CVE-2024-53103.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-50067](https://patchblox.com/security/data/cve/CVE-2024-50067.md) | High | uprobe: avoid out-of-bounds memory access of fetching args | 7.8 | 0.0024 |  |
| [CVE-2024-50242](https://patchblox.com/security/data/cve/CVE-2024-50242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: Additional check in ntfs_file_release | 7.8 | 0.0023 |  |
| [CVE-2024-50247](https://patchblox.com/security/data/cve/CVE-2024-50247.md) | High | bpftool: fs/ntfs3: Check if more than chunk-size bytes are written (Andrew Ballance) [Orabug: 37268655] | 7.1 | 0.0023 |  |
| [CVE-2024-42322](https://patchblox.com/security/data/cve/CVE-2024-42322.md) | High | dtb-aarch64: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347) | 8.0 | 0.0023 |  |
| [CVE-2024-53052](https://patchblox.com/security/data/cve/CVE-2024-53052.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-53066](https://patchblox.com/security/data/cve/CVE-2024-53066.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0066 |  |
| [CVE-2024-50299](https://patchblox.com/security/data/cve/CVE-2024-50299.md) | Routine | kernel-64kb: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488). | 5.5 | 0.0062 |  |
| [CVE-2024-53093](https://patchblox.com/security/data/cve/CVE-2024-53093.md) | Routine | nvme-multipath: defer partition scanning | 5.5 | 0.0061 |  |
| [CVE-2024-53138](https://patchblox.com/security/data/cve/CVE-2024-53138.md) | Routine | kernel-64kb: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223). | 5.5 | 0.0055 |  |
| [CVE-2024-50251](https://patchblox.com/security/data/cve/CVE-2024-50251.md) | Routine | kernel-64kb: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248). | 6.2 | 0.0053 |  |
| [CVE-2024-50256](https://patchblox.com/security/data/cve/CVE-2024-50256.md) | Routine | netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() | 5.5 | 0.0053 |  |
| [CVE-2024-53122](https://patchblox.com/security/data/cve/CVE-2024-53122.md) | Routine | kernel-64kb: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076). | 5.9 | 0.0053 |  |
| [CVE-2024-50273](https://patchblox.com/security/data/cve/CVE-2024-50273.md) | Routine | kernel-64kb: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462). | 5.5 | 0.0029 |  |
| [CVE-2024-50272](https://patchblox.com/security/data/cve/CVE-2024-50272.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-36478](https://patchblox.com/security/data/cve/CVE-2024-36478.md) | Routine | dtb-aarch64: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841). | 5.5 | 0.0027 |  |
| [CVE-2024-53042](https://patchblox.com/security/data/cve/CVE-2024-53042.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678). | 5.5 | 0.0027 |  |
| [CVE-2024-53113](https://patchblox.com/security/data/cve/CVE-2024-53113.md) | Routine | kernel-64kb: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077). | 5.5 | 0.0025 |  |
| [CVE-2024-53140](https://patchblox.com/security/data/cve/CVE-2024-53140.md) | Routine | kernel-64kb: netlink: terminate outstanding dump on socket close (bsc#1234222). | 5.5 | 0.0025 |  |
| [CVE-2024-53131](https://patchblox.com/security/data/cve/CVE-2024-53131.md) | Routine | kernel-64kb: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220). | 5.5 | 0.0024 |  |
| [CVE-2024-53130](https://patchblox.com/security/data/cve/CVE-2024-53130.md) | Routine | kernel-64kb: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219). | 5.5 | 0.0024 |  |
| [CVE-2024-50271](https://patchblox.com/security/data/cve/CVE-2024-50271.md) | Routine | kernel-64kb: signal: restore the override_rlimit logic (bsc#1233460). | 5.5 | 0.0023 |  |
| [CVE-2024-50072](https://patchblox.com/security/data/cve/CVE-2024-50072.md) | Routine | bpftool: x86/bugs: Use code segment selector for VERW operand (Pawan Gupta) [Orabug: 37227383] | 5.5 | 0.0023 |  |
| [CVE-2024-50012](https://patchblox.com/security/data/cve/CVE-2024-50012.md) | Routine | kernel-64kb: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386). | 5.5 | 0.0023 |  |
| [CVE-2024-50295](https://patchblox.com/security/data/cve/CVE-2024-50295.md) | Routine | kernel-64kb: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484). | 5.5 | 0.0023 |  |
| [CVE-2024-53097](https://patchblox.com/security/data/cve/CVE-2024-53097.md) | Routine | kernel-uek: ELSA-2025-20018: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0023 |  |
| [CVE-2024-50244](https://patchblox.com/security/data/cve/CVE-2024-50244.md) | Routine | bpftool: fs/ntfs3: Additional check in ni_clear() (Konstantin Komarov) [Orabug: 37268638] | 5.5 | 0.0022 |  |
| [CVE-2024-50245](https://patchblox.com/security/data/cve/CVE-2024-50245.md) | Routine | kernel-64kb: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203). | 5.5 | 0.0022 |  |
| [CVE-2024-50249](https://patchblox.com/security/data/cve/CVE-2024-50249.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50259](https://patchblox.com/security/data/cve/CVE-2024-50259.md) | Routine | bpftool: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie) [Orabug: 37... | 5.5 | 0.0022 |  |
| [CVE-2024-50243](https://patchblox.com/security/data/cve/CVE-2024-50243.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: Fix general protection fault in run_is... | 5.5 | 0.0022 |  |
| [CVE-2024-53129](https://patchblox.com/security/data/cve/CVE-2024-53129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50229](https://patchblox.com/security/data/cve/CVE-2024-50229.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-53121](https://patchblox.com/security/data/cve/CVE-2024-53121.md) | Routine | kernel-64kb: net/mlx5: fs, lock FTE when checking if active (bsc#1234078). | 5.5 | 0.0021 |  |
| [CVE-2024-41080](https://patchblox.com/security/data/cve/CVE-2024-41080.md) | Routine | dtb-aarch64: io_uring: fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616). | 5.5 | 0.0020 |  |
| [CVE-2024-53123](https://patchblox.com/security/data/cve/CVE-2024-53123.md) | Routine | kernel-64kb: mptcp: error out earlier on disconnect (bsc#1234070). | 5.5 | 0.0018 |  |
| [CVE-2024-53100](https://patchblox.com/security/data/cve/CVE-2024-53100.md) | Routine | nvme: tcp: avoid race between queue_lock lock and destroy | 4.7 | 0.0017 |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.