ALASLIVEPATCH-2025-210


Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2025-210
Advisory Release Date: 2025-03-26 19:21 Pacific
Advisory Updated Date: 2025-04-01 16:04 Pacific
Severity: Important

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

In the Linux kernel, the following vulnerability has been resolved:

pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)


Affected Packages:

kernel-livepatch-5.10.234-225.895


Issue Correction:
Run yum update kernel-livepatch-5.10.234-225.895 to update your system.

New Packages:
aarch64:
    kernel-livepatch-5.10.234-225.895-1.0-1.amzn2.aarch64

src:
    kernel-livepatch-5.10.234-225.895-1.0-1.amzn2.src

x86_64:
    kernel-livepatch-5.10.234-225.895-1.0-1.amzn2.x86_64