Amazon Linux 2023

Amazon Linux 2023 — redis6 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — redis6 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1222 Related CVEs: CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 CVE-2025-32023 CVE-2025-48367 CVE-2025-21605 CVE-2024-46981  +12 more Upstream summary: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.141-165.249 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.141-165.249 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-089 Related CVEs: CVE-2025-38248 CVE-2025-38386 CVE-2025-39673 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration (CVE-2025-38248) […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.12.31-35.92 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.12.31-35.92 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-082 Related CVEs: CVE-2025-39677 CVE-2025-38386 CVE-2025-38248 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_internal (CVE-2025-39677) Table of contents Symptom & […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.12.35-55.103 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.12.35-55.103 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-083 Related CVEs: CVE-2025-39677 CVE-2025-38386 CVE-2025-38248 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_internal (CVE-2025-39677) Table of contents Symptom & […]

Read more
Amazon Linux 2023 — microcode_ctl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — microcode_ctl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1209 Related CVEs: CVE-2025-22839 CVE-2025-22840 CVE-2025-22889 CVE-2025-26403 CVE-2025-32086 CVE-2025-20053 CVE-2025-21090 CVE-2025-24305  +12 more Upstream summary: Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.140-154.222 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.140-154.222 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-071 Related CVEs: CVE-2025-38386 CVE-2025-38248 CVE-2025-38000 CVE-2025-38003 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing (CVE-2025-38386) […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.141-155.222 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.141-155.222 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-075 Related CVEs: CVE-2025-38386 CVE-2025-38248 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing (CVE-2025-38386) Table of […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.12.30-34.92 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.12.30-34.92 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-072 Related CVEs: CVE-2025-38386 CVE-2025-38248 CVE-2025-38037 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing (CVE-2025-38386) Table […]

Read more
Amazon Linux 2023 — udisks2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — udisks2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1178 Related CVEs: CVE-2025-8067 CVE-2025-6019 Upstream summary: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.12.25-32.101 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.12.25-32.101 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-063 Related CVEs: CVE-2025-38248 CVE-2025-38037 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration (CVE-2025-38248) Table of contents Symptom […]

Read more
CHAT