Vulmon
Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2025-225
Advisory Release Date: 2025-04-23 21:58 Pacific
Advisory Updated Date: 2025-04-23 21:58 Pacific
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential oob read in nilfs_btree_check_delete() (CVE-2024-47757)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix double brelse() the buffer of the extents path (CVE-2024-49882)
In the Linux kernel, the following vulnerability has been resolved:
net: do not delay dst_entries_add() in dst_release() (CVE-2024-50036)
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264)
In the Linux kernel, the following vulnerability has been resolved:
security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
In the Linux kernel, the following vulnerability has been resolved:
nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
Affected Packages:
kernel-livepatch-4.14.355-276.618
Issue Correction:
Run yum update kernel-livepatch-4.14.355-276.618 to update your system.
src:
kernel-livepatch-4.14.355-276.618-1.0-6.amzn2.src
x86_64:
kernel-livepatch-4.14.355-276.618-1.0-6.amzn2.x86_64