Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2025-209
Advisory Released Date: 2025-04-01
Advisory Updated Date: 2025-04-01
Severity:
Important
Issue Overview:
In the Linux kernel, the following vulnerability has been resolved:
sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
In the Linux kernel, the following vulnerability has been resolved:
pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
Affected Packages:
kernel-livepatch-5.10.233-224.894
Issue Correction:
Run yum update kernel-livepatch-5.10.233-224.894 to update your system.
New Packages:
aarch64:
kernel-livepatch-5.10.233-224.894-1.0-6.amzn2.aarch64
src:
kernel-livepatch-5.10.233-224.894-1.0-6.amzn2.src
x86_64:
kernel-livepatch-5.10.233-224.894-1.0-6.amzn2.x86_64