ALAS2023LIVEPATCH-2026-375

References: CVE-2026-68121  CVE-2026-74469  CVE-2026-80844  CVE-2026-81000 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

pppoe: reload header pointer after dev_hard_header() (CVE-2026-68121)

In the Linux kernel, the following vulnerability has been resolved:

sctp: prevent peer transport count overflow (CVE-2026-74469)

In the Linux kernel, the following vulnerability has been resolved:

xfrm: ah6: validate routing header segments_left (CVE-2026-80844)

In the Linux kernel, the following vulnerability has been resolved:

net: tun: bound receive headroom (CVE-2026-81000)

Issue Correction:
Please ensure you have live patching enabled. Run dnf update kernel-livepatch-6.12.95-124.187 --releasever latest or dnf update --advisory ALAS2023LIVEPATCH-2026-375 --releasever latest to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    kernel-livepatch-6.12.95-124.187-1.0-5.amzn2023.aarch64

src:
    kernel-livepatch-6.12.95-124.187-1.0-5.amzn2023.src

x86_64:
    kernel-livepatch-6.12.95-124.187-1.0-5.amzn2023.x86_64