ALAS2023-2025-1253

References: CVE-2025-39998  CVE-2025-40018  CVE-2025-40035  CVE-2025-40044  CVE-2025-40048  CVE-2025-40049  CVE-2025-40068  CVE-2025-40070  CVE-2025-40078  CVE-2025-40080  CVE-2025-40081 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: target_core_configfs: Add length check to avoid buffer overflow (CVE-2025-39998)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: Defer ip_vs_ftp unregister during netns cleanup (CVE-2025-40018)

In the Linux kernel, the following vulnerability has been resolved:

Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (CVE-2025-40035)

In the Linux kernel, the following vulnerability has been resolved:

fs: udf: fix OOB read in lengthAllocDescs handling (CVE-2025-40044)

In the Linux kernel, the following vulnerability has been resolved:

uio_hv_generic: Let userspace take care of interrupt mask (CVE-2025-40048)

In the Linux kernel, the following vulnerability has been resolved:

Squashfs: fix uninit-value in squashfs_get_parent (CVE-2025-40049)

In the Linux kernel, the following vulnerability has been resolved:

fs: ntfs3: Fix integer overflow in run_unpack() (CVE-2025-40068)

In the Linux kernel, the following vulnerability has been resolved:

pps: fix warning in pps_register_cdev when register device fail (CVE-2025-40070)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Explicitly check accesses to bpf_sock_addr (CVE-2025-40078)

In the Linux kernel, the following vulnerability has been resolved:

nbd: restrict sockets to TCP and UDP (CVE-2025-40080)

In the Linux kernel, the following vulnerability has been resolved:

perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (CVE-2025-40081)

Issue Correction:
Run dnf update kernel --releasever 2023.9.20251027 or dnf update --advisory ALAS2023-2025-1253 --releasever 2023.9.20251027 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    kernel-tools-devel-6.1.156-177.286.amzn2023.aarch64
    kernel-libbpf-devel-6.1.156-177.286.amzn2023.aarch64
    perf-6.1.156-177.286.amzn2023.aarch64
    bpftool-debuginfo-6.1.156-177.286.amzn2023.aarch64
    kernel-modules-extra-6.1.156-177.286.amzn2023.aarch64
    kernel-tools-6.1.156-177.286.amzn2023.aarch64
    kernel-livepatch-6.1.156-177.286-1.0-0.amzn2023.aarch64
    kernel-libbpf-6.1.156-177.286.amzn2023.aarch64
    python3-perf-debuginfo-6.1.156-177.286.amzn2023.aarch64
    bpftool-6.1.156-177.286.amzn2023.aarch64
    perf-debuginfo-6.1.156-177.286.amzn2023.aarch64
    kernel-modules-extra-common-6.1.156-177.286.amzn2023.aarch64
    kernel-libbpf-static-6.1.156-177.286.amzn2023.aarch64
    kernel-libbpf-debuginfo-6.1.156-177.286.amzn2023.aarch64
    kernel-tools-debuginfo-6.1.156-177.286.amzn2023.aarch64
    kernel-headers-6.1.156-177.286.amzn2023.aarch64
    python3-perf-6.1.156-177.286.amzn2023.aarch64
    kernel-6.1.156-177.286.amzn2023.aarch64
    kernel-debuginfo-6.1.156-177.286.amzn2023.aarch64
    kernel-debuginfo-common-aarch64-6.1.156-177.286.amzn2023.aarch64
    kernel-devel-6.1.156-177.286.amzn2023.aarch64

src:
    kernel-6.1.156-177.286.amzn2023.src

x86_64:
    bpftool-debuginfo-6.1.156-177.286.amzn2023.x86_64
    python3-perf-debuginfo-6.1.156-177.286.amzn2023.x86_64
    kernel-libbpf-6.1.156-177.286.amzn2023.x86_64
    kernel-tools-devel-6.1.156-177.286.amzn2023.x86_64
    bpftool-6.1.156-177.286.amzn2023.x86_64
    python3-perf-6.1.156-177.286.amzn2023.x86_64
    kernel-livepatch-6.1.156-177.286-1.0-0.amzn2023.x86_64
    perf-6.1.156-177.286.amzn2023.x86_64
    kernel-libbpf-debuginfo-6.1.156-177.286.amzn2023.x86_64
    kernel-headers-6.1.156-177.286.amzn2023.x86_64
    perf-debuginfo-6.1.156-177.286.amzn2023.x86_64
    kernel-tools-6.1.156-177.286.amzn2023.x86_64
    kernel-tools-debuginfo-6.1.156-177.286.amzn2023.x86_64
    kernel-modules-extra-common-6.1.156-177.286.amzn2023.x86_64
    kernel-libbpf-static-6.1.156-177.286.amzn2023.x86_64
    kernel-debuginfo-6.1.156-177.286.amzn2023.x86_64
    kernel-libbpf-devel-6.1.156-177.286.amzn2023.x86_64
    kernel-modules-extra-6.1.156-177.286.amzn2023.x86_64
    kernel-6.1.156-177.286.amzn2023.x86_64
    kernel-debuginfo-common-x86_64-6.1.156-177.286.amzn2023.x86_64
    kernel-devel-6.1.156-177.286.amzn2023.x86_64