ALAS2023-2026-1544

References: CVE-2025-71265  CVE-2025-71266  CVE-2025-71267  CVE-2026-23231  CVE-2026-23243 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (CVE-2025-71265)

In the Linux kernel, the following vulnerability has been resolved:

fs: ntfs3: check return value of indx_find to avoid infinite loop (CVE-2025-71266)

In the Linux kernel, the following vulnerability has been resolved:

fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (CVE-2025-71267)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CVE-2026-23231)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umad: Reject negative data_len in ib_umad_write (CVE-2026-23243)

Issue Correction:
Run dnf update kernel --releasever 2023.11.20260406 or dnf update --advisory ALAS2023-2026-1544 --releasever 2023.11.20260406 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    kernel-libbpf-devel-6.1.166-197.305.amzn2023.aarch64
    kernel-libbpf-static-6.1.166-197.305.amzn2023.aarch64
    kernel-libbpf-6.1.166-197.305.amzn2023.aarch64
    python3-perf-debuginfo-6.1.166-197.305.amzn2023.aarch64
    perf-debuginfo-6.1.166-197.305.amzn2023.aarch64
    kernel-tools-debuginfo-6.1.166-197.305.amzn2023.aarch64
    python3-perf-6.1.166-197.305.amzn2023.aarch64
    kernel-libbpf-debuginfo-6.1.166-197.305.amzn2023.aarch64
    perf-6.1.166-197.305.amzn2023.aarch64
    kernel-tools-6.1.166-197.305.amzn2023.aarch64
    kernel-modules-extra-6.1.166-197.305.amzn2023.aarch64
    kernel-modules-extra-common-6.1.166-197.305.amzn2023.aarch64
    kernel-livepatch-6.1.166-197.305-1.0-0.amzn2023.aarch64
    kernel-tools-devel-6.1.166-197.305.amzn2023.aarch64
    bpftool-6.1.166-197.305.amzn2023.aarch64
    kernel-6.1.166-197.305.amzn2023.aarch64
    bpftool-debuginfo-6.1.166-197.305.amzn2023.aarch64
    kernel-debuginfo-6.1.166-197.305.amzn2023.aarch64
    kernel-headers-6.1.166-197.305.amzn2023.aarch64
    kernel-debuginfo-common-aarch64-6.1.166-197.305.amzn2023.aarch64
    kernel-devel-6.1.166-197.305.amzn2023.aarch64

src:
    kernel-6.1.166-197.305.amzn2023.src

x86_64:
    bpftool-debuginfo-6.1.166-197.305.amzn2023.x86_64
    kernel-modules-extra-common-6.1.166-197.305.amzn2023.x86_64
    perf-debuginfo-6.1.166-197.305.amzn2023.x86_64
    bpftool-6.1.166-197.305.amzn2023.x86_64
    kernel-libbpf-devel-6.1.166-197.305.amzn2023.x86_64
    kernel-tools-debuginfo-6.1.166-197.305.amzn2023.x86_64
    kernel-modules-extra-6.1.166-197.305.amzn2023.x86_64
    kernel-headers-6.1.166-197.305.amzn2023.x86_64
    kernel-tools-6.1.166-197.305.amzn2023.x86_64
    kernel-libbpf-debuginfo-6.1.166-197.305.amzn2023.x86_64
    perf-6.1.166-197.305.amzn2023.x86_64
    python3-perf-6.1.166-197.305.amzn2023.x86_64
    kernel-libbpf-static-6.1.166-197.305.amzn2023.x86_64
    kernel-libbpf-6.1.166-197.305.amzn2023.x86_64
    python3-perf-debuginfo-6.1.166-197.305.amzn2023.x86_64
    kernel-livepatch-6.1.166-197.305-1.0-0.amzn2023.x86_64
    kernel-tools-devel-6.1.166-197.305.amzn2023.x86_64
    kernel-6.1.166-197.305.amzn2023.x86_64
    kernel-debuginfo-6.1.166-197.305.amzn2023.x86_64
    kernel-debuginfo-common-x86_64-6.1.166-197.305.amzn2023.x86_64
    kernel-devel-6.1.166-197.305.amzn2023.x86_64