ALAS2LIVEPATCH-2026-302


Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2026-302
Advisory Released Date: 2026-05-26
Advisory Updated Date: 2026-06-09
Severity: Important

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

net/rds: reset op_nents when zerocopy page pin fails (CVE-2026-43494)


Affected Packages:

kernel-livepatch-5.10.252-250.992


Issue Correction:
Please ensure you have live patching enabled. Run yum update kernel-livepatch-5.10.252-250.992 or yum update --advisory ALAS2LIVEPATCH-2026-302 to update your system.

New Packages:
aarch64:
    kernel-livepatch-5.10.252-250.992-1.0-4.amzn2.aarch64

src:
    kernel-livepatch-5.10.252-250.992-1.0-4.amzn2.src

x86_64:
    kernel-livepatch-5.10.252-250.992-1.0-4.amzn2.x86_64

Changelog:

2026-06-09: CVE-2026-43494 was added to this advisory.