ALAS2023-2025-1080

References: CVE-2025-22112  CVE-2025-22119  CVE-2025-22122  CVE-2025-22128  CVE-2025-23137  CVE-2025-38001  CVE-2025-38082 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: fix out-of-range access of vnic_info array (CVE-2025-22112)

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: init wiphy_work before allocating rfkill fails (CVE-2025-22119)

In the Linux kernel, the following vulnerability has been resolved:

block: fix adding folio to bio (CVE-2025-22122)

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path (CVE-2025-22128)

In the Linux kernel, the following vulnerability has been resolved:

cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (CVE-2025-23137)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

In the Linux kernel, the following vulnerability has been resolved:

gpio: virtuser: fix potential out-of-bound write (CVE-2025-38082)

Issue Correction:
Run dnf update kernel6.12 --releasever 2023.8.20250707 to update your system.

New Packages:

aarch64:
    bpftool-6.12.35-55.103.amzn2023.aarch64
    kernel-tools-debuginfo-6.12.35-55.103.amzn2023.aarch64
    bpftool-debuginfo-6.12.35-55.103.amzn2023.aarch64
    perf6.12-6.12.35-55.103.amzn2023.aarch64
    kernel-libbpf-devel-6.12.35-55.103.amzn2023.aarch64
    kernel-libbpf-debuginfo-6.12.35-55.103.amzn2023.aarch64
    perf6.12-debuginfo-6.12.35-55.103.amzn2023.aarch64
    kernel-libbpf-static-6.12.35-55.103.amzn2023.aarch64
    kernel-livepatch-6.12.35-55.103-1.0-0.amzn2023.aarch64
    kernel-modules-extra-common-6.12.35-55.103.amzn2023.aarch64
    kernel-tools-devel-6.12.35-55.103.amzn2023.aarch64
    python3-perf6.12-6.12.35-55.103.amzn2023.aarch64
    kernel6.12-modules-extra-6.12.35-55.103.amzn2023.aarch64
    kernel-tools-6.12.35-55.103.amzn2023.aarch64
    python3-perf6.12-debuginfo-6.12.35-55.103.amzn2023.aarch64
    kernel-libbpf-6.12.35-55.103.amzn2023.aarch64
    kernel6.12-debuginfo-6.12.35-55.103.amzn2023.aarch64
    kernel-headers-6.12.35-55.103.amzn2023.aarch64
    kernel6.12-6.12.35-55.103.amzn2023.aarch64
    kernel6.12-debuginfo-common-aarch64-6.12.35-55.103.amzn2023.aarch64
    kernel-devel-6.12.35-55.103.amzn2023.aarch64

src:
    kernel6.12-6.12.35-55.103.amzn2023.src

x86_64:
    kernel-libbpf-debuginfo-6.12.35-55.103.amzn2023.x86_64
    python3-perf6.12-debuginfo-6.12.35-55.103.amzn2023.x86_64
    kernel-libbpf-6.12.35-55.103.amzn2023.x86_64
    kernel-tools-6.12.35-55.103.amzn2023.x86_64
    python3-perf6.12-6.12.35-55.103.amzn2023.x86_64
    kernel-tools-debuginfo-6.12.35-55.103.amzn2023.x86_64
    kernel-tools-devel-6.12.35-55.103.amzn2023.x86_64
    perf6.12-6.12.35-55.103.amzn2023.x86_64
    kernel-libbpf-static-6.12.35-55.103.amzn2023.x86_64
    bpftool-debuginfo-6.12.35-55.103.amzn2023.x86_64
    kernel-livepatch-6.12.35-55.103-1.0-0.amzn2023.x86_64
    bpftool-6.12.35-55.103.amzn2023.x86_64
    kernel6.12-modules-extra-6.12.35-55.103.amzn2023.x86_64
    perf6.12-debuginfo-6.12.35-55.103.amzn2023.x86_64
    kernel-modules-extra-common-6.12.35-55.103.amzn2023.x86_64
    kernel-headers-6.12.35-55.103.amzn2023.x86_64
    kernel-libbpf-devel-6.12.35-55.103.amzn2023.x86_64
    kernel6.12-debuginfo-6.12.35-55.103.amzn2023.x86_64
    kernel6.12-6.12.35-55.103.amzn2023.x86_64
    kernel6.12-debuginfo-common-x86_64-6.12.35-55.103.amzn2023.x86_64
    kernel-devel-6.12.35-55.103.amzn2023.x86_64