ALAS2LIVEPATCH-2025-231


Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2025-231
Advisory Released Date: 2025-05-29
Advisory Updated Date: 2025-05-29
Severity: Important

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)


Affected Packages:

kernel-livepatch-5.10.234-225.921


Issue Correction:
Run yum update kernel-livepatch-5.10.234-225.921 to update your system.

New Packages:
aarch64:
    kernel-livepatch-5.10.234-225.921-1.0-4.amzn2.aarch64

src:
    kernel-livepatch-5.10.234-225.921-1.0-4.amzn2.src

x86_64:
    kernel-livepatch-5.10.234-225.921-1.0-4.amzn2.x86_64