Amazon Linux 2023 Security Advisory: ALAS2023-2026-2107
Advisory Released Date: 2026-08-31
Advisory Updated Date: 2026-08-31
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: pop cached request if it is usable (CVE-2026-64017)
In the Linux kernel, the following vulnerability has been resolved:
sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (CVE-2026-64581)
In the Linux kernel, the following vulnerability has been resolved:
rbd: Reset positive result codes to zero in object map update path (CVE-2026-68131)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: serialize qdisc_rtab_list against concurrent get/put (CVE-2026-68138)
In the Linux kernel, the following vulnerability has been resolved:
libceph: Reject monmaps advertising zero monitors (CVE-2026-68155)
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (CVE-2026-68160)
In the Linux kernel, the following vulnerability has been resolved:
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)
In the Linux kernel, the following vulnerability has been resolved:
rds: drop incoming messages that cross network namespace boundaries (CVE-2026-68335)
In the Linux kernel, the following vulnerability has been resolved:
net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338)
In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Make Safe-RET robust against interrupt injection (CVE-2026-68480)
In the Linux kernel, the following vulnerability has been resolved:
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72051)
In the Linux kernel, the following vulnerability has been resolved:
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)
In the Linux kernel, the following vulnerability has been resolved:
vhost: reset the vring metadata cache on vring reconfiguration (CVE-2026-74580)
Affected Packages:
kernel
Issue Correction:
Run dnf update kernel --releasever 2023.12.20260831 or dnf update --advisory ALAS2023-2026-2107 --releasever 2023.12.20260831 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
aarch64:
kernel-tools-devel-6.1.182-227.379.amzn2023.aarch64
kernel-livepatch-6.1.182-227.379-1.0-0.amzn2023.aarch64
python3-perf-debuginfo-6.1.182-227.379.amzn2023.aarch64
kernel-modules-extra-common-6.1.182-227.379.amzn2023.aarch64
perf-6.1.182-227.379.amzn2023.aarch64
kernel-tools-6.1.182-227.379.amzn2023.aarch64
bpftool-6.1.182-227.379.amzn2023.aarch64
perf-debuginfo-6.1.182-227.379.amzn2023.aarch64
kernel-headers-6.1.182-227.379.amzn2023.aarch64
python3-perf-6.1.182-227.379.amzn2023.aarch64
kernel-tools-debuginfo-6.1.182-227.379.amzn2023.aarch64
kernel-modules-extra-6.1.182-227.379.amzn2023.aarch64
bpftool-debuginfo-6.1.182-227.379.amzn2023.aarch64
kernel-6.1.182-227.379.amzn2023.aarch64
kernel-debuginfo-6.1.182-227.379.amzn2023.aarch64
kernel-debuginfo-common-aarch64-6.1.182-227.379.amzn2023.aarch64
kernel-devel-6.1.182-227.379.amzn2023.aarch64
src:
kernel-6.1.182-227.379.amzn2023.src
x86_64:
perf-6.1.182-227.379.amzn2023.x86_64
perf-debuginfo-6.1.182-227.379.amzn2023.x86_64
kernel-modules-extra-6.1.182-227.379.amzn2023.x86_64
kernel-debuginfo-6.1.182-227.379.amzn2023.x86_64
kernel-tools-debuginfo-6.1.182-227.379.amzn2023.x86_64
bpftool-debuginfo-6.1.182-227.379.amzn2023.x86_64
kernel-modules-extra-common-6.1.182-227.379.amzn2023.x86_64
kernel-livepatch-6.1.182-227.379-1.0-0.amzn2023.x86_64
kernel-tools-6.1.182-227.379.amzn2023.x86_64
python3-perf-6.1.182-227.379.amzn2023.x86_64
python3-perf-debuginfo-6.1.182-227.379.amzn2023.x86_64
kernel-tools-devel-6.1.182-227.379.amzn2023.x86_64
bpftool-6.1.182-227.379.amzn2023.x86_64
kernel-headers-6.1.182-227.379.amzn2023.x86_64
kernel-6.1.182-227.379.amzn2023.x86_64
kernel-debuginfo-common-x86_64-6.1.182-227.379.amzn2023.x86_64
kernel-devel-6.1.182-227.379.amzn2023.x86_64