Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2025-218
Advisory Released Date: 2025-04-16
Advisory Updated Date: 2025-04-16
Severity:
Important
Issue Overview:
In the Linux kernel, the following vulnerability has been resolved:
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (CVE-2024-53103)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix use-after-free when attempting to join an aborted transaction (CVE-2025-21753)
Affected Packages:
kernel-livepatch-4.14.355-275.603
Issue Correction:
Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.355-275.603 or yum update --advisory ALAS2LIVEPATCH-2025-218 to update your system.
New Packages:
src:
kernel-livepatch-4.14.355-275.603-1.0-1.amzn2.src
x86_64:
kernel-livepatch-4.14.355-275.603-1.0-1.amzn2.x86_64