🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-204 Related CVEs: CVE-2024-49995 CVE-2024-50279 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun (CVE-2024-49995) In the Linux kernel, the following […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-169 Related CVEs: CVE-2023-6040 CVE-2023-6606 CVE-2024-0565 CVE-2024-0646 CVE-2024-23849 Upstream summary: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1964 Related CVEs: CVE-2023-20032 CVE-2023-20052 CVE-2023-20197 CVE-2024-20505 CVE-2024-20506 Upstream summary: Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV versions 1.0.0 and earlier, 0.105.1 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2593 Related CVEs: CVE-2024-4453 CVE-2023-37327 CVE-2021-3522 Upstream summary: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-182 Related CVEs: CVE-2024-27020 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2651 Related CVEs: CVE-2024-42934 Upstream summary: openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934) Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-186 Related CVEs: CVE-2022-48666 CVE-2024-41090 CVE-2024-41091 CVE-2024-39480 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free (CVE-2022-48666) kernel: virtio-net: tap: mlx5_core short […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-191 Related CVEs: CVE-2024-41087 CVE-2022-48666 CVE-2024-41090 CVE-2024-41091 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error (CVE-2024-41087) Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2PYTHON3.8-2024-016 Related CVEs: CVE-2001-1267 CVE-2007-4559 CVE-2021-28861 CVE-2024-0397 CVE-2024-0450 CVE-2024-4032 CVE-2024-6232 CVE-2024-6923 +12 more Upstream summary: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2674 Related CVEs: CVE-2024-39936 Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. […]
