Amazon Linux 2023 Security Advisory: ALAS2023-2026-3431
Advisory Released Date: 2026-11-12
Advisory Updated Date: 2026-11-12
Severity:
Medium
Issue Overview:
A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI (Small Computer System Interface) Vital Product Data (VPD) page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack buffer overflow in the `_sg_parse_vpd_80()` function during serial number parsing. Successful exploitation could result in a denial of service by crashing or destabilizing the process querying the serial number. (CVE-2026-93433)
Affected Packages:
libstoragemgmt
Issue Correction:
Run dnf update libstoragemgmt --releasever 2023.12.20261112 or dnf update --advisory ALAS2023-2026-3431 --releasever 2023.12.20261112 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
python3-libstoragemgmt-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-debugsource-1.9.4-5.amzn2023.0.3.aarch64
python3-libstoragemgmt-debuginfo-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-udev-debuginfo-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-devel-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-debuginfo-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-udev-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-nfs-plugin-1.9.4-5.amzn2023.0.3.aarch64
libstoragemgmt-nfs-plugin-debuginfo-1.9.4-5.amzn2023.0.3.aarch64
noarch:
libstoragemgmt-hpsa-plugin-1.9.4-5.amzn2023.0.3.noarch
libstoragemgmt-targetd-plugin-1.9.4-5.amzn2023.0.3.noarch
libstoragemgmt-local-plugin-1.9.4-5.amzn2023.0.3.noarch
libstoragemgmt-arcconf-plugin-1.9.4-5.amzn2023.0.3.noarch
libstoragemgmt-megaraid-plugin-1.9.4-5.amzn2023.0.3.noarch
libstoragemgmt-smis-plugin-1.9.4-5.amzn2023.0.3.noarch
src:
libstoragemgmt-1.9.4-5.amzn2023.0.3.src
x86_64:
python3-libstoragemgmt-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-debuginfo-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-debugsource-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-1.9.4-5.amzn2023.0.3.x86_64
python3-libstoragemgmt-debuginfo-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-udev-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-nfs-plugin-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-nfs-plugin-debuginfo-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-udev-debuginfo-1.9.4-5.amzn2023.0.3.x86_64
libstoragemgmt-devel-1.9.4-5.amzn2023.0.3.x86_64