Amazon Linux 2 Security Advisory: ALAS2KERNEL-5.10-2025-086
Advisory Released Date: 2025-03-26
Advisory Updated Date: 2025-05-21
FAQs regarding Amazon Linux ALAS/CVE Severity
An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory. (CVE-2022-1462)
A bug in the IMA subsystem was discovered which would incorrectly allow kexec to be used when kernel lockdown was enabled (CVE-2022-21505)
A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure. (CVE-2022-23825)
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. (CVE-2022-26373)
A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to enable information disclosure via local access. (CVE-2022-28693)
A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. (CVE-2022-29900)
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions. (CVE-2022-29901)
A memory access flaw was found in the Linux kernel's XEN hypervisor for the virtual machine. This flaw allows a local user to crash the system or potentially escalate their privileges on the system. (CVE-2022-36123)
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. (CVE-2022-36879)
A memory corruption flaw was found in the Linux kernel's Netfilter subsystem in the way a local user uses the libnetfilter_queue when analyzing a corrupted network packet. This flaw allows a local user to crash the system or a remote user to crash the system when the libnetfilter_queue is used by a local user. (CVE-2022-36946)
In the Linux kernel, the following vulnerability has been resolved:
vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix race condition between ext4_write and ext4_convert_inline_data (CVE-2022-49414)
In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix uninit-value in mpol_rebind_policy() (CVE-2022-49567)
In the Linux kernel, the following vulnerability has been resolved:
KVM: Don't null dereference ops->destroy (CVE-2022-49568)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_max_reordering. (CVE-2022-49571)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (CVE-2022-49572)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix a data-race around sysctl_tcp_early_retrans. (CVE-2022-49573)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_recovery. (CVE-2022-49574)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (CVE-2022-49575)
In the Linux kernel, the following vulnerability has been resolved:
udp: Fix a data-race around sysctl_udp_l3mdev_accept. (CVE-2022-49577)
In the Linux kernel, the following vulnerability has been resolved:
ip: Fix data-races around sysctl_ip_prot_sock. (CVE-2022-49578)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (CVE-2022-49580)
In the Linux kernel, the following vulnerability has been resolved:
iavf: Fix handling of dummy receive descriptors (CVE-2022-49583)
In the Linux kernel, the following vulnerability has been resolved:
ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (CVE-2022-49584)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (CVE-2022-49585)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_fastopen. (CVE-2022-49586)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (CVE-2022-49587)
In the Linux kernel, the following vulnerability has been resolved:
igmp: Fix data-races around sysctl_igmp_qrv. (CVE-2022-49589)
In the Linux kernel, the following vulnerability has been resolved:
igmp: Fix data-races around sysctl_igmp_llm_reports. (CVE-2022-49590)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix a data-race around sysctl_tcp_probe_interval. (CVE-2022-49593)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (CVE-2022-49594)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix a data-race around sysctl_tcp_probe_threshold. (CVE-2022-49595)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_min_snd_mss. (CVE-2022-49596)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_base_mss. (CVE-2022-49597)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_mtu_probing. (CVE-2022-49598)
In the Linux kernel, the following vulnerability has been resolved:
ip: Fix a data-race around sysctl_ip_autobind_reuse. (CVE-2022-49600)
In the Linux kernel, the following vulnerability has been resolved:
tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (CVE-2022-49601)
In the Linux kernel, the following vulnerability has been resolved:
ip: Fix a data-race around sysctl_fwmark_reflect. (CVE-2022-49602)
In the Linux kernel, the following vulnerability has been resolved:
ip: Fix data-races around sysctl_ip_fwd_update_priority. (CVE-2022-49603)
In the Linux kernel, the following vulnerability has been resolved:
ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (CVE-2022-49604)
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (CVE-2022-49607)
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: ralink: Check for null return of devm_kcalloc (CVE-2022-49608)
In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS (CVE-2022-49611)
In the Linux kernel, the following vulnerability has been resolved:
serial: 8250: Fix PM usage_count for console handover (CVE-2022-49613)
In the Linux kernel, the following vulnerability has been resolved:
net: tipc: fix possible refcount leak in tipc_sk_create() (CVE-2022-49620)
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
In the Linux kernel, the following vulnerability has been resolved:
nexthop: Fix data-races around nexthop_compat_mode. (CVE-2022-49629)
In the Linux kernel, the following vulnerability has been resolved:
raw: Fix a data-race around sysctl_raw_l3mdev_accept. (CVE-2022-49631)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix a data-race around sysctl_fib_sync_mem. (CVE-2022-49637)
In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl. (CVE-2022-49638)
In the Linux kernel, the following vulnerability has been resolved:
cipso: Fix data-races around sysctl. (CVE-2022-49639)
In the Linux kernel, the following vulnerability has been resolved:
sysctl: Fix data races in proc_douintvec_minmax(). (CVE-2022-49640)
In the Linux kernel, the following vulnerability has been resolved:
sysctl: Fix data races in proc_douintvec(). (CVE-2022-49641)
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643)
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (CVE-2022-49644)
In the Linux kernel, the following vulnerability has been resolved:
cgroup: Use separate src/dst nodes when preloading css_sets for migration (CVE-2022-49647)
In the Linux kernel, the following vulnerability has been resolved:
xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (CVE-2022-49649)
A NULL pointer dereference issue was found in the SCTP network protocol in net/sctp/stream_sched.c in the Linux kernel. If stream_in allocation fails, stream_out is freed, which would be accessed further. This flaw allows a local user to crash the system or potentially cause a denial of service. (CVE-2023-2177)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel to update your system.
aarch64:
kernel-5.10.135-122.509.amzn2.aarch64
kernel-headers-5.10.135-122.509.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.10.135-122.509.amzn2.aarch64
perf-5.10.135-122.509.amzn2.aarch64
perf-debuginfo-5.10.135-122.509.amzn2.aarch64
python-perf-5.10.135-122.509.amzn2.aarch64
python-perf-debuginfo-5.10.135-122.509.amzn2.aarch64
kernel-tools-5.10.135-122.509.amzn2.aarch64
kernel-tools-devel-5.10.135-122.509.amzn2.aarch64
kernel-tools-debuginfo-5.10.135-122.509.amzn2.aarch64
bpftool-5.10.135-122.509.amzn2.aarch64
bpftool-debuginfo-5.10.135-122.509.amzn2.aarch64
kernel-devel-5.10.135-122.509.amzn2.aarch64
kernel-debuginfo-5.10.135-122.509.amzn2.aarch64
kernel-livepatch-5.10.135-122.509-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.10.135-122.509.amzn2.i686
src:
kernel-5.10.135-122.509.amzn2.src
x86_64:
kernel-5.10.135-122.509.amzn2.x86_64
kernel-headers-5.10.135-122.509.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.10.135-122.509.amzn2.x86_64
perf-5.10.135-122.509.amzn2.x86_64
perf-debuginfo-5.10.135-122.509.amzn2.x86_64
python-perf-5.10.135-122.509.amzn2.x86_64
python-perf-debuginfo-5.10.135-122.509.amzn2.x86_64
kernel-tools-5.10.135-122.509.amzn2.x86_64
kernel-tools-devel-5.10.135-122.509.amzn2.x86_64
kernel-tools-debuginfo-5.10.135-122.509.amzn2.x86_64
bpftool-5.10.135-122.509.amzn2.x86_64
bpftool-debuginfo-5.10.135-122.509.amzn2.x86_64
kernel-devel-5.10.135-122.509.amzn2.x86_64
kernel-debuginfo-5.10.135-122.509.amzn2.x86_64
kernel-livepatch-5.10.135-122.509-1.0-0.amzn2.x86_64
2025-05-21: CVE-2022-49597 was added to this advisory.
2025-05-21: CVE-2022-49639 was added to this advisory.
2025-05-21: CVE-2022-49587 was added to this advisory.
2025-05-21: CVE-2022-49602 was added to this advisory.
2025-05-21: CVE-2022-49584 was added to this advisory.
2025-05-21: CVE-2022-49585 was added to this advisory.
2025-05-21: CVE-2022-49568 was added to this advisory.
2025-05-21: CVE-2022-49601 was added to this advisory.
2025-05-21: CVE-2022-49586 was added to this advisory.
2025-05-21: CVE-2022-49608 was added to this advisory.
2025-05-21: CVE-2022-49644 was added to this advisory.
2025-05-21: CVE-2022-49578 was added to this advisory.
2025-05-21: CVE-2022-49593 was added to this advisory.
2025-05-21: CVE-2022-49573 was added to this advisory.
2025-05-21: CVE-2022-49643 was added to this advisory.
2025-05-21: CVE-2022-49574 was added to this advisory.
2025-05-21: CVE-2022-49649 was added to this advisory.
2025-05-21: CVE-2022-49641 was added to this advisory.
2025-05-21: CVE-2022-49575 was added to this advisory.
2025-05-21: CVE-2022-49598 was added to this advisory.
2025-05-21: CVE-2022-49604 was added to this advisory.
2025-05-21: CVE-2022-49620 was added to this advisory.
2025-05-21: CVE-2022-49627 was added to this advisory.
2025-05-21: CVE-2022-49637 was added to this advisory.
2025-05-21: CVE-2022-49571 was added to this advisory.
2025-05-21: CVE-2022-49607 was added to this advisory.
2025-05-21: CVE-2022-49613 was added to this advisory.
2025-05-21: CVE-2022-49596 was added to this advisory.