Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40173: In the Linux kernel, the following vulnerability has been resolved:
net/ip6_tunnel: Prevent perpetual tunnel growth
CVE-2025-40070: In the Linux kernel, the following vulnerability has been resolved:
pps: fix warning in pps_register_cdev when register device fail
CVE-2024-26804: In the Linux kernel, the following vulnerability has been resolved:
net: ip_tunnel: prevent perpetual headroom growth
4.14.355-280.713.amzn24.14.355-280.713.amzn24.14.355-280.713.amzn24.14.355-280.713.amzn24.14.355-280.713.amzn24.14.355-280.713.amzn21.0-0.amzn24.14.355-280.713.amzn24.14.355-280.713.amzn24.14.355-280.713.amzn2