🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2287 Related CVEs: CVE-2023-38545 CVE-2023-38546 CVE-2023-38039 CVE-2018-1000300 CVE-2018-1000301 CVE-2018-1000005 CVE-2018-1000007 CVE-2025-10966 +12 more Upstream summary: An issue was found in curl that can cause a buffer overflow in its SOCKS5 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3143 Related CVEs: CVE-2025-13151 CVE-2021-46848 CVE-2024-12133 Upstream summary: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-047 Related CVEs: CVE-2025-21927 CVE-2025-37785 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) In the Linux kernel, the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3050 Related CVEs: CVE-2025-11561 CVE-2022-4254 CVE-2021-3621 CVE-2018-16838 CVE-2019-3811 CVE-2018-10852 Upstream summary: A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-036 Related CVEs: CVE-2024-36899 CVE-2024-50055 CVE-2024-50121 CVE-2024-50246 CVE-2024-53206 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899) In […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1707 Related CVEs: CVE-2025-3010 Upstream summary: A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-222 Related CVEs: CVE-2025-21703 CVE-2025-21796 CVE-2025-21647 CVE-2025-21702 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (CVE-2025-21703) Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-089 Related CVEs: CVE-2025-38248 CVE-2025-38386 CVE-2025-39673 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration (CVE-2025-38248) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2899 Related CVEs: CVE-2025-48734 CVE-2019-10086 Upstream summary: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2PYTHON3.8-2025-018 Related CVEs: CVE-2001-1267 CVE-2007-4559 CVE-2024-35195 CVE-2024-3651 CVE-2024-37891 Upstream summary: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote […]
