AWS linux high security documentation change
Summary
Added recall notice and mitigation steps for kernel versions causing soft lockups when using auditd
Security assessment
The change documents a kernel-level stability issue affecting auditd (security auditing tool) that leads to soft lockups and instance failures. While primarily a stability issue, the impact on auditd (a core security component) and explicit mitigation steps to downgrade kernels indicate security implications related to availability of security logging capabilities.
Diff
diff --git a/linux/al2023/release-notes/relnotes-2023.8.20250804.md b/linux/al2023/release-notes/relnotes-2023.8.20250804.md index dd0ed352a..7ef584f8d 100644 --- a//linux/al2023/release-notes/relnotes-2023.8.20250804.md +++ b//linux/al2023/release-notes/relnotes-2023.8.20250804.md @@ -3 +3 @@ -Release SummaryRepository UpdatesImage UpdatesContact us +Important: This release was recalledRelease SummaryRepository UpdatesImage UpdatesContact us @@ -10,0 +11,4 @@ These are the release notes for Amazon Linux 2023 (AL2023) version 2023.8.202508 + * [Important: This release was recalled](./relnotes-2023.8.20250804.html#kernel-soft-lockup-warning-2023.8.20250804) + + * [Solution and Mitigation](./relnotes-2023.8.20250804.html#kernel-soft-lockup-mitigation-2023.8.20250804) + @@ -37,0 +42,49 @@ These are the release notes for Amazon Linux 2023 (AL2023) version 2023.8.202508 +## Important: This release was recalled + +###### Warning + +Versions of Amazon Linux released on August 6, 2025 may experience soft lockup issues and instance launch failures when using `auditd`. Customers are recommended to avoid using the affected AMI versions or updating to the affected kernels while also running `auditd`. Amazon is working on providing an update that addresses this issue. + +This issue affects AL2023 version 2023.8.20250804 with the following kernel versions: + + * `kernel-6.1.147-172.259.amzn2023` + + * `kernel6.12-6.12.40-63.107.amzn2023` + + + + +To check if your instance is running an affected kernel version, use the `uname -r` command. + +### Solution and Mitigation + +To downgrade to the previous version you can run these commands: + +If your system is running kernel version `kernel-6.1.147-172.259.amzn2023`: + + 1. Install the previous kernel: + + sudo dnf -y install kernel-6.1.144-170.251.amzn2023 --releasever=2023.8.20250721 && sudo dnf -y reinstall kernel-6.1.144-170.251.amzn2023 + + 2. Reboot to the installed kernel: + + sudo reboot + + + + +If your system is running kernel version `kernel6.12-6.12.40-63.107.amzn2023`: + + 1. Install the previous stable kernel: + + sudo dnf -y install kernel6.12-6.12.37-61.105.amzn2023 --releasever=2023.8.20250721 && sudo dnf -y reinstall kernel6.12-6.12.37-61.105.amzn2023 + + 2. Reboot to the installed kernel: + + sudo reboot + + + + +The Amazon Linux team is actively working on this kernel issue and customers can expect the updated kernel in the week of August 11, 2025. + @@ -249 +302 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -2023.8 release notes +AL2023 version 2023.8.20250808