ALAS2023-2026-1970

References: CVE-2026-46324  CVE-2026-53078  CVE-2026-53092  CVE-2026-53359 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use list_del_rcu for netlink hooks (CVE-2026-46324)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops (CVE-2026-53078)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix linked reg delta tracking when src_reg == dst_reg (CVE-2026-53092)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

Issue Correction:
Run dnf update kernel6.12 --releasever 2023.12.20260720 or dnf update --advisory ALAS2023-2026-1970 --releasever 2023.12.20260720 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    bpftool6.12-6.12.94-123.190.amzn2023.aarch64
    perf6.12-6.12.94-123.190.amzn2023.aarch64
    python3-perf6.12-debuginfo-6.12.94-123.190.amzn2023.aarch64
    python3-perf6.12-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-modules-extra-6.12.94-123.190.amzn2023.aarch64
    perf6.12-debuginfo-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-headers-6.12.94-123.190.amzn2023.aarch64
    bpftool6.12-debuginfo-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-tools-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-tools-debuginfo-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-modules-extra-common-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-debuginfo-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-tools-devel-6.12.94-123.190.amzn2023.aarch64
    kernel-livepatch-6.12.94-123.190-1.0-0.amzn2023.aarch64
    kernel6.12-debuginfo-common-aarch64-6.12.94-123.190.amzn2023.aarch64
    kernel6.12-devel-6.12.94-123.190.amzn2023.aarch64

src:
    kernel6.12-6.12.94-123.190.amzn2023.src

x86_64:
    kernel-livepatch-6.12.94-123.190-1.0-0.amzn2023.x86_64
    bpftool6.12-debuginfo-6.12.94-123.190.amzn2023.x86_64
    perf6.12-debuginfo-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-tools-debuginfo-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-tools-6.12.94-123.190.amzn2023.x86_64
    python3-perf6.12-debuginfo-6.12.94-123.190.amzn2023.x86_64
    python3-perf6.12-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-modules-extra-common-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-6.12.94-123.190.amzn2023.x86_64
    perf6.12-6.12.94-123.190.amzn2023.x86_64
    bpftool6.12-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-debuginfo-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-debuginfo-common-x86_64-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-tools-devel-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-modules-extra-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-devel-6.12.94-123.190.amzn2023.x86_64
    kernel6.12-headers-6.12.94-123.190.amzn2023.x86_64