Vulmon
Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2025-224
Advisory Release Date: 2025-04-23 21:58 Pacific
Advisory Updated Date: 2025-04-23 21:58 Pacific
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential oob read in nilfs_btree_check_delete() (CVE-2024-47757)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix double brelse() the buffer of the extents path (CVE-2024-49882)
In the Linux kernel, the following vulnerability has been resolved:
net: do not delay dst_entries_add() in dst_release() (CVE-2024-50036)
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264)
In the Linux kernel, the following vulnerability has been resolved:
nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
Affected Packages:
kernel-livepatch-4.14.355-275.572
Issue Correction:
Run yum update kernel-livepatch-4.14.355-275.572 to update your system.
src:
kernel-livepatch-4.14.355-275.572-1.0-5.amzn2.src
x86_64:
kernel-livepatch-4.14.355-275.572-1.0-5.amzn2.x86_64