🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2913 Related CVEs: CVE-2025-5222 CVE-2020-21913 Upstream summary: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2524 Related CVEs: CVE-2024-27316 CVE-2021-31618 CVE-2020-11993 CVE-2020-9490 CVE-2019-9511 CVE-2019-9516 CVE-2019-9517 CVE-2018-11763 +2 more Upstream summary: HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2661 Related CVEs: CVE-2024-39936 Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2727 Related CVEs: CVE-2024-40897 Upstream summary: Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2611 Related CVEs: CVE-2024-3596 CVE-2019-11234 CVE-2019-11235 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2022-41859 CVE-2022-41860 +4 more Upstream summary: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-192 Related CVEs: CVE-2024-46673 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure (CVE-2024-46673) Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-279 Related CVEs: CVE-2022-50500 CVE-2023-53530 CVE-2025-38527 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 CVE-2025-39923 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3085 Related CVEs: CVE-2025-59088 CVE-2025-59089 Upstream summary: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-188 Related CVEs: CVE-2022-48666 CVE-2024-41090 CVE-2024-41091 CVE-2024-39480 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free (CVE-2022-48666) kernel: virtio-net: tap: mlx5_core short […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-247 Related CVEs: CVE-2025-38037 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: vxlan: Annotate FDB data races (CVE-2025-38037) Table of contents Symptom & Impact Environment & […]
