Linux · 
Amazon Linux · Security advisory · February 26, 2025
Amazon Linux · Security advisory · February 26, 2025ALAS2023-2025-864: Security update for 21 packages
ALAS2023-2025-864, released February 26, 2025, fixes 52 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
52
None rated Critical
Exploited
0
None reported
Highest CVSS
8.0
Base score, 0 to 10
Highest EPSS
0.0087
59th percentile
Priority of the 52 CVEs
Patch now 0
Urgent 0
High 16
Routine 36
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 6.1.106-116.188.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-debuginfo | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-devel | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-headers | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-libbpf | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-libbpf-devel | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-libbpf-static | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-livepatch-6.1.106-116.188 | amzn 2023 | 1.0-0.amzn2023 |
| kernel-modules-extra | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-modules-extra-common | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-tools | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 6.1.106-116.188.amzn2023 |
| kernel-tools-devel | amzn 2023 | 6.1.106-116.188.amzn2023 |
| perf | amzn 2023 | 6.1.106-116.188.amzn2023 |
| perf-debuginfo | amzn 2023 | 6.1.106-116.188.amzn2023 |
| python3-perf | amzn 2023 | 6.1.106-116.188.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 6.1.106-116.188.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2024-42285 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0087 | None reported |
| High | CVE-2024-43883 | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0065 | None reported |
| High | CVE-2024-44970 | net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink | 7.8 | 0.0057 | None reported |
| High | CVE-2024-57947 | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0044 | None reported |
| High | CVE-2024-41042 | dtb-aarch64: Prefer nft_chain_validate (bsc#1228526). | 7.8 | 0.0032 | None reported |
| High | CVE-2024-43830 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | None reported |
| High | CVE-2024-42292 | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0025 | None reported |
| High | CVE-2024-43882 | dtb-aarch64: Fixed ToCToU between perm check and set-uid/gid usage | 7.0 | 0.0024 | None reported |
| High | CVE-2024-43871 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | None reported |
| High | CVE-2024-42302 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | None reported |
| High | CVE-2024-42305 | dtb-aarch64: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363). | 7.1 | 0.0023 | None reported |
| High | CVE-2024-42159 | dtb-aarch64: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754). | 7.8 | 0.0022 | None reported |
| High | CVE-2024-44934 | dtb-aarch64: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809). | 7.8 | 0.0022 | None reported |
| High | CVE-2024-43873 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | None reported |
| High | CVE-2023-53037 | scsi: mpi3mr: Bad drive in topology results kernel crash | 7.8 | 0.0021 | None reported |
| High | CVE-2023-53320 | kernel-64k-modules-extra: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important) | 7.8 | 0.0015 | None reported |
| Routine | CVE-2024-43856 | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0042 | None reported |
| Routine | CVE-2024-42259 | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 | None reported |
| Routine | CVE-2024-43893 | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | None reported |
| Routine | CVE-2024-39472 | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0025 | None reported |
| Routine | CVE-2024-43834 | dtb-aarch64: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314) | 5.5 | 0.0025 | None reported |
| Routine | CVE-2024-42276 | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | None reported |
| Routine | CVE-2024-42306 | dtb-aarch64: udf: Avoid using corrupted block bitmap buffer (bsc#1229362). | 5.5 | 0.0025 | None reported |
| Routine | CVE-2024-42283 | dtb-aarch64: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383) | 5.5 | 0.0024 | None reported |
| Routine | CVE-2024-44948 | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | None reported |
Showing 1 to 25 of 52
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.