ALAS2023-2026-1817

References: CVE-2025-39901  CVE-2025-40307  CVE-2026-31532  CVE-2026-31624  CVE-2026-31694  CVE-2026-43099 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

i40e: remove read access to debugfs files (CVE-2025-39901)

In the Linux kernel, the following vulnerability has been resolved:

exfat: validate cluster allocation bits of the allocation bitmap (CVE-2025-40307)

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

In the Linux kernel, the following vulnerability has been resolved:

HID: core: clamp report_size in s32ton() to avoid undefined shift (CVE-2026-31624)

In the Linux kernel, the following vulnerability has been resolved:

fuse: reject oversized dirents in page cache (CVE-2026-31694)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (CVE-2026-43099)

Issue Correction:
Run dnf update kernel --releasever 2023.12.20260608 or dnf update --advisory ALAS2023-2026-1817 --releasever 2023.12.20260608 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    perf-debuginfo-6.1.174-217.345.amzn2023.aarch64
    kernel-modules-extra-common-6.1.174-217.345.amzn2023.aarch64
    bpftool-6.1.174-217.345.amzn2023.aarch64
    kernel-tools-devel-6.1.174-217.345.amzn2023.aarch64
    perf-6.1.174-217.345.amzn2023.aarch64
    kernel-livepatch-6.1.174-217.345-1.0-0.amzn2023.aarch64
    kernel-modules-extra-6.1.174-217.345.amzn2023.aarch64
    kernel-tools-6.1.174-217.345.amzn2023.aarch64
    bpftool-debuginfo-6.1.174-217.345.amzn2023.aarch64
    kernel-headers-6.1.174-217.345.amzn2023.aarch64
    python3-perf-6.1.174-217.345.amzn2023.aarch64
    kernel-6.1.174-217.345.amzn2023.aarch64
    kernel-debuginfo-6.1.174-217.345.amzn2023.aarch64
    kernel-tools-debuginfo-6.1.174-217.345.amzn2023.aarch64
    python3-perf-debuginfo-6.1.174-217.345.amzn2023.aarch64
    kernel-debuginfo-common-aarch64-6.1.174-217.345.amzn2023.aarch64
    kernel-devel-6.1.174-217.345.amzn2023.aarch64

src:
    kernel-6.1.174-217.345.amzn2023.src

x86_64:
    bpftool-debuginfo-6.1.174-217.345.amzn2023.x86_64
    kernel-modules-extra-6.1.174-217.345.amzn2023.x86_64
    kernel-tools-devel-6.1.174-217.345.amzn2023.x86_64
    python3-perf-6.1.174-217.345.amzn2023.x86_64
    kernel-headers-6.1.174-217.345.amzn2023.x86_64
    kernel-tools-debuginfo-6.1.174-217.345.amzn2023.x86_64
    bpftool-6.1.174-217.345.amzn2023.x86_64
    perf-debuginfo-6.1.174-217.345.amzn2023.x86_64
    kernel-modules-extra-common-6.1.174-217.345.amzn2023.x86_64
    kernel-tools-6.1.174-217.345.amzn2023.x86_64
    kernel-livepatch-6.1.174-217.345-1.0-0.amzn2023.x86_64
    perf-6.1.174-217.345.amzn2023.x86_64
    kernel-debuginfo-6.1.174-217.345.amzn2023.x86_64
    python3-perf-debuginfo-6.1.174-217.345.amzn2023.x86_64
    kernel-6.1.174-217.345.amzn2023.x86_64
    kernel-debuginfo-common-x86_64-6.1.174-217.345.amzn2023.x86_64
    kernel-devel-6.1.174-217.345.amzn2023.x86_64