ALAS2023-2026-1894

Amazon Linux 2023 Security Advisory: ALAS2023-2026-1894
Advisory Released Date: 2026-06-22
Advisory Updated Date: 2026-06-22

Severity: Important

References: CVE-2026-31663 CVE-2026-31692 CVE-2026-43083 CVE-2026-43116 CVE-2026-46316
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)

In the Linux kernel, the following vulnerability has been resolved:

net: ioam6: fix OOB and missing lock (CVE-2026-43083)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Affected Packages:

kernel6.12

Issue Correction:
Run dnf update kernel6.12 --releasever 2023.12.20260622 or dnf update --advisory ALAS2023-2026-1894 --releasever 2023.12.20260622 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    python3-perf6.12-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-modules-extra-common-6.12.92-122.166.amzn2023.aarch64
    perf6.12-debuginfo-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-tools-devel-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-tools-debuginfo-6.12.92-122.166.amzn2023.aarch64
    python3-perf6.12-debuginfo-6.12.92-122.166.amzn2023.aarch64
    bpftool6.12-6.12.92-122.166.amzn2023.aarch64
    perf6.12-6.12.92-122.166.amzn2023.aarch64
    bpftool6.12-debuginfo-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-modules-extra-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-debuginfo-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-tools-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-headers-6.12.92-122.166.amzn2023.aarch64
    kernel-livepatch-6.12.92-122.166-1.0-0.amzn2023.aarch64
    kernel6.12-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-debuginfo-common-aarch64-6.12.92-122.166.amzn2023.aarch64
    kernel6.12-devel-6.12.92-122.166.amzn2023.aarch64

src:
    kernel6.12-6.12.92-122.166.amzn2023.src

x86_64:
    bpftool6.12-debuginfo-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-modules-extra-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-debuginfo-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-tools-devel-6.12.92-122.166.amzn2023.x86_64
    kernel-livepatch-6.12.92-122.166-1.0-0.amzn2023.x86_64
    kernel6.12-tools-6.12.92-122.166.amzn2023.x86_64
    perf6.12-debuginfo-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-tools-debuginfo-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-modules-extra-common-6.12.92-122.166.amzn2023.x86_64
    python3-perf6.12-debuginfo-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-headers-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-6.12.92-122.166.amzn2023.x86_64
    perf6.12-6.12.92-122.166.amzn2023.x86_64
    python3-perf6.12-6.12.92-122.166.amzn2023.x86_64
    bpftool6.12-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-debuginfo-common-x86_64-6.12.92-122.166.amzn2023.x86_64
    kernel6.12-devel-6.12.92-122.166.amzn2023.x86_64

Additional References

Release Notes: Amazon Linux 2023 Release Notes

Red Hat: CVE-2026-31663, CVE-2026-31692, CVE-2026-43083, CVE-2026-43116, CVE-2026-46316

Mitre: CVE-2026-31663, CVE-2026-31692, CVE-2026-43083, CVE-2026-43116, CVE-2026-46316