# ALAS2023-2025-864: Security update for 21 packages

ALAS2023-2025-864, released February 26, 2025, fixes 52 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-864
- Platform: Linux
- Released: Feb 26, 2025
- Priority: High (Closes CVE-2024-42285, high severity)
- CVEs: 52, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-864.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-livepatch-6.1.106-116.188](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.106-116.188.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.106-116.188.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-42285](https://patchblox.com/security/data/cve/CVE-2024-42285.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0087 |  |
| [CVE-2024-43883](https://patchblox.com/security/data/cve/CVE-2024-43883.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0065 |  |
| [CVE-2024-44970](https://patchblox.com/security/data/cve/CVE-2024-44970.md) | High | net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink | 7.8 | 0.0057 |  |
| [CVE-2024-57947](https://patchblox.com/security/data/cve/CVE-2024-57947.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0044 |  |
| [CVE-2024-41042](https://patchblox.com/security/data/cve/CVE-2024-41042.md) | High | dtb-aarch64: Prefer nft_chain_validate (bsc#1228526). | 7.8 | 0.0032 |  |
| [CVE-2024-43830](https://patchblox.com/security/data/cve/CVE-2024-43830.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-42292](https://patchblox.com/security/data/cve/CVE-2024-42292.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0025 |  |
| [CVE-2024-43882](https://patchblox.com/security/data/cve/CVE-2024-43882.md) | High | dtb-aarch64: Fixed ToCToU between perm check and set-uid/gid usage | 7.0 | 0.0024 |  |
| [CVE-2024-43871](https://patchblox.com/security/data/cve/CVE-2024-43871.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-42302](https://patchblox.com/security/data/cve/CVE-2024-42302.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42305](https://patchblox.com/security/data/cve/CVE-2024-42305.md) | High | dtb-aarch64: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363). | 7.1 | 0.0023 |  |
| [CVE-2024-42159](https://patchblox.com/security/data/cve/CVE-2024-42159.md) | High | dtb-aarch64: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754). | 7.8 | 0.0022 |  |
| [CVE-2024-44934](https://patchblox.com/security/data/cve/CVE-2024-44934.md) | High | dtb-aarch64: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809). | 7.8 | 0.0022 |  |
| [CVE-2024-43873](https://patchblox.com/security/data/cve/CVE-2024-43873.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2023-53037](https://patchblox.com/security/data/cve/CVE-2023-53037.md) | High | scsi: mpi3mr: Bad drive in topology results kernel crash | 7.8 | 0.0021 |  |
| [CVE-2023-53320](https://patchblox.com/security/data/cve/CVE-2023-53320.md) | High | kernel-64k-modules-extra: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important) | 7.8 | 0.0015 |  |
| [CVE-2024-43856](https://patchblox.com/security/data/cve/CVE-2024-43856.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0042 |  |
| [CVE-2024-42259](https://patchblox.com/security/data/cve/CVE-2024-42259.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-43893](https://patchblox.com/security/data/cve/CVE-2024-43893.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-39472](https://patchblox.com/security/data/cve/CVE-2024-39472.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0025 |  |
| [CVE-2024-43834](https://patchblox.com/security/data/cve/CVE-2024-43834.md) | Routine | dtb-aarch64: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314) | 5.5 | 0.0025 |  |
| [CVE-2024-42276](https://patchblox.com/security/data/cve/CVE-2024-42276.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-42306](https://patchblox.com/security/data/cve/CVE-2024-42306.md) | Routine | dtb-aarch64: udf: Avoid using corrupted block bitmap buffer (bsc#1229362). | 5.5 | 0.0025 |  |
| [CVE-2024-42283](https://patchblox.com/security/data/cve/CVE-2024-42283.md) | Routine | dtb-aarch64: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383) | 5.5 | 0.0024 |  |
| [CVE-2024-44948](https://patchblox.com/security/data/cve/CVE-2024-44948.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-44944](https://patchblox.com/security/data/cve/CVE-2024-44944.md) | Routine | dtb-aarch64: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899). | 6.1 | 0.0024 |  |
| [CVE-2024-43817](https://patchblox.com/security/data/cve/CVE-2024-43817.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-43828](https://patchblox.com/security/data/cve/CVE-2024-43828.md) | Routine | dtb-aarch64: ext4: fix infinite loop when replaying fast_commit (bsc#1229394). | 5.5 | 0.0024 |  |
| [CVE-2024-42281](https://patchblox.com/security/data/cve/CVE-2024-42281.md) | Routine | dtb-aarch64: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386). | 5.5 | 0.0024 |  |
| [CVE-2024-43889](https://patchblox.com/security/data/cve/CVE-2024-43889.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-42304](https://patchblox.com/security/data/cve/CVE-2024-42304.md) | Routine | dtb-aarch64: ext4: make sure the first directory block is not a hole (bsc#1229364). | 5.5 | 0.0023 |  |
| [CVE-2024-43854](https://patchblox.com/security/data/cve/CVE-2024-43854.md) | Routine | dtb-aarch64: block: initialize integrity buffer to zero before writing it to media (bsc#1229345) | 5.5 | 0.0023 |  |
| [CVE-2024-43894](https://patchblox.com/security/data/cve/CVE-2024-43894.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43914](https://patchblox.com/security/data/cve/CVE-2024-43914.md) | Routine | dtb-aarch64: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790). | 5.5 | 0.0023 |  |
| [CVE-2024-44935](https://patchblox.com/security/data/cve/CVE-2024-44935.md) | Routine | dtb-aarch64: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810). | 5.5 | 0.0023 |  |
| [CVE-2024-42269](https://patchblox.com/security/data/cve/CVE-2024-42269.md) | Routine | dtb-aarch64: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402). | 5.5 | 0.0023 |  |
| [CVE-2024-42270](https://patchblox.com/security/data/cve/CVE-2024-42270.md) | Routine | dtb-aarch64: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404). | 5.5 | 0.0023 |  |
| [CVE-2024-43853](https://patchblox.com/security/data/cve/CVE-2024-43853.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43823](https://patchblox.com/security/data/cve/CVE-2024-43823.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-44965](https://patchblox.com/security/data/cve/CVE-2024-44965.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-42258](https://patchblox.com/security/data/cve/CVE-2024-42258.md) | Routine | bpftool: ELSA-2024-9315: kernel security update (MODERATE) | 5.5 | 0.0022 |  |
| [CVE-2024-42299](https://patchblox.com/security/data/cve/CVE-2024-42299.md) | Routine | bpftool: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Huacai Chen) [Orabug: 36964218] | 5.5 | 0.0022 |  |
| [CVE-2024-42312](https://patchblox.com/security/data/cve/CVE-2024-42312.md) | Routine | dtb-aarch64: sysctl: always initialize i_uid/i_gid (bsc#1229357) | 5.5 | 0.0022 |  |
| [CVE-2024-43869](https://patchblox.com/security/data/cve/CVE-2024-43869.md) | Routine | kernel-64k: kernel: perf: Fix event leak upon exec and file release | 6.1 | 0.0021 |  |
| [CVE-2024-43870](https://patchblox.com/security/data/cve/CVE-2024-43870.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-44958](https://patchblox.com/security/data/cve/CVE-2024-44958.md) | Routine | dtb-aarch64: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179). | 5.5 | 0.0021 |  |
| [CVE-2024-42307](https://patchblox.com/security/data/cve/CVE-2024-42307.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-42316](https://patchblox.com/security/data/cve/CVE-2024-42316.md) | Routine | dtb-aarch64: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353). | 5.5 | 0.0021 |  |
| [CVE-2024-42321](https://patchblox.com/security/data/cve/CVE-2024-42321.md) | Routine | bpftool: ELSA-2025-6966: kernel security update (MODERATE) | 5.5 | 0.0021 |  |
| [CVE-2024-43837](https://patchblox.com/security/data/cve/CVE-2024-43837.md) | Routine | dtb-aarch64: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297). | 5.5 | 0.0021 |  |
| [CVE-2024-43855](https://patchblox.com/security/data/cve/CVE-2024-43855.md) | Routine | dtb-aarch64: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342). | 5.5 | 0.0021 |  |
| [CVE-2024-42268](https://patchblox.com/security/data/cve/CVE-2024-42268.md) | Routine | dtb-aarch64: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391). | 5.5 | 0.0017 |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.