Amazon Linux 2 Security Advisory: ALASKERNEL-5.10-2025-085
Advisory Release Date: 2025-03-13 01:33 Pacific
Advisory Updated Date: 2025-03-26 12:30 Pacific
FAQs regarding Amazon Linux ALAS/CVE Severity
Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access. (CVE-2021-33061)
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (CVE-2024-46830)
In the Linux kernel, the following vulnerability has been resolved:
sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
In the Linux kernel, the following vulnerability has been resolved:
pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
In the Linux kernel, the following vulnerability has been resolved:
netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (CVE-2025-21703)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel to update your system.
System reboot is required in order to complete this update.
aarch64:
kernel-5.10.234-225.917.amzn2.aarch64
kernel-headers-5.10.234-225.917.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.10.234-225.917.amzn2.aarch64
perf-5.10.234-225.917.amzn2.aarch64
perf-debuginfo-5.10.234-225.917.amzn2.aarch64
python-perf-5.10.234-225.917.amzn2.aarch64
python-perf-debuginfo-5.10.234-225.917.amzn2.aarch64
kernel-tools-5.10.234-225.917.amzn2.aarch64
kernel-tools-devel-5.10.234-225.917.amzn2.aarch64
kernel-tools-debuginfo-5.10.234-225.917.amzn2.aarch64
bpftool-5.10.234-225.917.amzn2.aarch64
bpftool-debuginfo-5.10.234-225.917.amzn2.aarch64
kernel-devel-5.10.234-225.917.amzn2.aarch64
kernel-debuginfo-5.10.234-225.917.amzn2.aarch64
kernel-livepatch-5.10.234-225.917-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.10.234-225.917.amzn2.i686
src:
kernel-5.10.234-225.917.amzn2.src
x86_64:
kernel-5.10.234-225.917.amzn2.x86_64
kernel-headers-5.10.234-225.917.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.10.234-225.917.amzn2.x86_64
perf-5.10.234-225.917.amzn2.x86_64
perf-debuginfo-5.10.234-225.917.amzn2.x86_64
python-perf-5.10.234-225.917.amzn2.x86_64
python-perf-debuginfo-5.10.234-225.917.amzn2.x86_64
kernel-tools-5.10.234-225.917.amzn2.x86_64
kernel-tools-devel-5.10.234-225.917.amzn2.x86_64
kernel-tools-debuginfo-5.10.234-225.917.amzn2.x86_64
bpftool-5.10.234-225.917.amzn2.x86_64
bpftool-debuginfo-5.10.234-225.917.amzn2.x86_64
kernel-devel-5.10.234-225.917.amzn2.x86_64
kernel-debuginfo-5.10.234-225.917.amzn2.x86_64
kernel-livepatch-5.10.234-225.917-1.0-0.amzn2.x86_64