Amazon Linux 2 Security Advisory: ALAS2KERNEL-5.4-2025-106
Advisory Released Date: 2025-08-09
Advisory Updated Date: 2025-10-02
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (CVE-2022-50073)
In the Linux kernel, the following vulnerability has been resolved:
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF (CVE-2023-53259)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Return the firmware result upon destroying QP/RQ (CVE-2023-53286)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (CVE-2024-26644)
In the Linux kernel, the following vulnerability has been resolved:
ACPI: PAD: fix crash in exit_round_robin() (CVE-2024-49935)
In the Linux kernel, the following vulnerability has been resolved:
serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (CVE-2025-38040)
In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown() (CVE-2025-38064)
In the Linux kernel, the following vulnerability has been resolved:
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (CVE-2025-38102)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (CVE-2025-38161)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: uartlite: register uart driver in init (CVE-2025-38262)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Refuse to evaluate a method if arguments are missing (CVE-2025-38386)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (CVE-2025-38387)
In the Linux kernel, the following vulnerability has been resolved:
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (CVE-2025-38400)
In the Linux kernel, the following vulnerability has been resolved:
mtk-sd: Prevent memory corruption from DMA map failure (CVE-2025-38401)
In the Linux kernel, the following vulnerability has been resolved:
vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (CVE-2025-38439)
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: Fix stack memory use after return in raid1_reshape (CVE-2025-38445)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: Abort __tc_modify_qdisc if parent class does not exist (CVE-2025-38457)
In the Linux kernel, the following vulnerability has been resolved:
tipc: Fix use-after-free in tipc_conn_close(). (CVE-2025-38464)
In the Linux kernel, the following vulnerability has been resolved:
netlink: Fix wraparounds of sk->sk_rmem_alloc. (CVE-2025-38465)
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix oops due to non-existence of prealloc backlog struct (CVE-2025-38514)
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: qcom: msm: mark certain pins as invalid for interrupts (CVE-2025-38516)
In the Linux kernel, the following vulnerability has been resolved:
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (CVE-2025-38540)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel or yum update --advisory ALAS2KERNEL-5.4-2025-106 to update your system.
System reboot is required in order to complete this update.
aarch64:
kernel-5.4.296-217.427.amzn2.aarch64
kernel-headers-5.4.296-217.427.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.4.296-217.427.amzn2.aarch64
perf-5.4.296-217.427.amzn2.aarch64
perf-debuginfo-5.4.296-217.427.amzn2.aarch64
python-perf-5.4.296-217.427.amzn2.aarch64
python-perf-debuginfo-5.4.296-217.427.amzn2.aarch64
kernel-tools-5.4.296-217.427.amzn2.aarch64
kernel-tools-devel-5.4.296-217.427.amzn2.aarch64
kernel-tools-debuginfo-5.4.296-217.427.amzn2.aarch64
bpftool-5.4.296-217.427.amzn2.aarch64
bpftool-debuginfo-5.4.296-217.427.amzn2.aarch64
kernel-devel-5.4.296-217.427.amzn2.aarch64
kernel-debuginfo-5.4.296-217.427.amzn2.aarch64
i686:
kernel-headers-5.4.296-217.427.amzn2.i686
src:
kernel-5.4.296-217.427.amzn2.src
x86_64:
kernel-5.4.296-217.427.amzn2.x86_64
kernel-headers-5.4.296-217.427.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.4.296-217.427.amzn2.x86_64
perf-5.4.296-217.427.amzn2.x86_64
perf-debuginfo-5.4.296-217.427.amzn2.x86_64
python-perf-5.4.296-217.427.amzn2.x86_64
python-perf-debuginfo-5.4.296-217.427.amzn2.x86_64
kernel-tools-5.4.296-217.427.amzn2.x86_64
kernel-tools-devel-5.4.296-217.427.amzn2.x86_64
kernel-tools-debuginfo-5.4.296-217.427.amzn2.x86_64
bpftool-5.4.296-217.427.amzn2.x86_64
bpftool-debuginfo-5.4.296-217.427.amzn2.x86_64
kernel-devel-5.4.296-217.427.amzn2.x86_64
kernel-debuginfo-5.4.296-217.427.amzn2.x86_64
2025-10-02: CVE-2025-38387 was added to this advisory.
2025-10-02: CVE-2025-38401 was added to this advisory.
2025-10-02: CVE-2025-38465 was added to this advisory.
2025-10-02: CVE-2025-38514 was added to this advisory.
2025-10-02: CVE-2025-38516 was added to this advisory.
2025-10-02: CVE-2025-38540 was added to this advisory.
2025-09-22: CVE-2023-53259 was added to this advisory.
2025-09-22: CVE-2023-53286 was added to this advisory.
2025-09-08: CVE-2025-38464 was added to this advisory.
2025-09-08: CVE-2025-38457 was added to this advisory.
2025-09-08: CVE-2025-38445 was added to this advisory.
2025-09-08: CVE-2025-38439 was added to this advisory.
2025-08-27: CVE-2025-38386 was added to this advisory.
2025-08-26: CVE-2025-38262 was added to this advisory.
2025-08-26: CVE-2025-38350 was added to this advisory.
2025-08-26: CVE-2025-38403 was added to this advisory.
2025-08-26: CVE-2025-38400 was added to this advisory.
2025-08-26: CVE-2025-38102 was added to this advisory.
2025-08-26: CVE-2025-38211 was added to this advisory.