Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2025-283
Advisory Released Date: 2026-01-05
Advisory Updated Date: 2026-01-05
Severity:
Important
Issue Overview:
In the Linux kernel, the following vulnerability has been resolved:
net/ip6_tunnel: Prevent perpetual tunnel growth (CVE-2025-40173)
Affected Packages:
kernel-livepatch-5.10.245-241.976
Issue Correction:
Please ensure you have live patching enabled. Run yum update kernel-livepatch-5.10.245-241.976 or yum update --advisory ALAS2LIVEPATCH-2025-283 to update your system.
New Packages:
aarch64:
kernel-livepatch-5.10.245-241.976-1.0-1.amzn2.aarch64
src:
kernel-livepatch-5.10.245-241.976-1.0-1.amzn2.src
x86_64:
kernel-livepatch-5.10.245-241.976-1.0-1.amzn2.x86_64