Amazon Linux 2023 Security Advisory: ALAS2023-2026-3376
Advisory Released Date: 2026-11-09
Advisory Updated Date: 2026-11-09
Severity:
Medium
Issue Overview:
A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the metadata to crash. This vulnerability results in a Denial of Service (DoS) for affected systems. (CVE-2026-19617)
Affected Packages:
lvm2
Issue Correction:
Run dnf update lvm2 --releasever 2023.12.20261109 or dnf update --advisory ALAS2023-2026-3376 --releasever 2023.12.20261109 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
device-mapper-libs-debuginfo-1.02.185-1.amzn2023.0.6.aarch64
lvm2-debuginfo-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-event-libs-debuginfo-1.02.185-1.amzn2023.0.6.aarch64
lvm2-lockd-debuginfo-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-devel-1.02.185-1.amzn2023.0.6.aarch64
lvm2-devel-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-event-libs-1.02.185-1.amzn2023.0.6.aarch64
lvm2-testsuite-debuginfo-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-libs-1.02.185-1.amzn2023.0.6.aarch64
lvm2-libs-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-1.02.185-1.amzn2023.0.6.aarch64
device-mapper-event-devel-1.02.185-1.amzn2023.0.6.aarch64
lvm2-debugsource-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-event-debuginfo-1.02.185-1.amzn2023.0.6.aarch64
lvm2-libs-debuginfo-2.03.16-1.amzn2023.0.6.aarch64
lvm2-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-debuginfo-1.02.185-1.amzn2023.0.6.aarch64
lvm2-testsuite-2.03.16-1.amzn2023.0.6.aarch64
device-mapper-event-1.02.185-1.amzn2023.0.6.aarch64
lvm2-lockd-2.03.16-1.amzn2023.0.6.aarch64
noarch:
lvm2-dbusd-2.03.16-1.amzn2023.0.6.noarch
src:
lvm2-2.03.16-1.amzn2023.0.6.src
x86_64:
lvm2-debuginfo-2.03.16-1.amzn2023.0.6.x86_64
device-mapper-libs-debuginfo-1.02.185-1.amzn2023.0.6.x86_64
lvm2-testsuite-debuginfo-2.03.16-1.amzn2023.0.6.x86_64
lvm2-lockd-debuginfo-2.03.16-1.amzn2023.0.6.x86_64
lvm2-lockd-2.03.16-1.amzn2023.0.6.x86_64
lvm2-libs-debuginfo-2.03.16-1.amzn2023.0.6.x86_64
lvm2-testsuite-2.03.16-1.amzn2023.0.6.x86_64
device-mapper-event-debuginfo-1.02.185-1.amzn2023.0.6.x86_64
lvm2-2.03.16-1.amzn2023.0.6.x86_64
device-mapper-event-libs-debuginfo-1.02.185-1.amzn2023.0.6.x86_64
lvm2-debugsource-2.03.16-1.amzn2023.0.6.x86_64
lvm2-libs-2.03.16-1.amzn2023.0.6.x86_64
device-mapper-libs-1.02.185-1.amzn2023.0.6.x86_64
device-mapper-event-devel-1.02.185-1.amzn2023.0.6.x86_64
device-mapper-event-libs-1.02.185-1.amzn2023.0.6.x86_64
lvm2-devel-2.03.16-1.amzn2023.0.6.x86_64
device-mapper-debuginfo-1.02.185-1.amzn2023.0.6.x86_64
device-mapper-event-1.02.185-1.amzn2023.0.6.x86_64
device-mapper-devel-1.02.185-1.amzn2023.0.6.x86_64
device-mapper-1.02.185-1.amzn2023.0.6.x86_64