Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-299
Advisory Released Date: 2026-11-02
Advisory Updated Date: 2026-11-02
Severity:
Medium
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-19617:
A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the metadata to crash. This vulnerability results in a Denial of Service (DoS) for affected systems.
Affected Packages:
lvm2
Issue Correction:
Run dnf update lvm2 --releasever 2027.0.20261102 or dnf update --advisory ALAS2027-2026-299 --releasever 2027.0.20261102 to update your system.
New Packages:
aarch64:
device-mapper-event-debuginfo-1.02.212-2.amzn2027.aarch64
device-mapper-event-libs-1.02.212-2.amzn2027.aarch64
device-mapper-1.02.212-2.amzn2027.aarch64
device-mapper-event-libs-debuginfo-1.02.212-2.amzn2027.aarch64
device-mapper-devel-1.02.212-2.amzn2027.aarch64
lvm2-libs-2.03.38-2.amzn2027.aarch64
lvm2-lockd-debuginfo-2.03.38-2.amzn2027.aarch64
lvm2-devel-2.03.38-2.amzn2027.aarch64
lvm2-2.03.38-2.amzn2027.aarch64
device-mapper-libs-debuginfo-1.02.212-2.amzn2027.aarch64
lvm2-debugsource-2.03.38-2.amzn2027.aarch64
lvm2-debuginfo-2.03.38-2.amzn2027.aarch64
device-mapper-event-devel-1.02.212-2.amzn2027.aarch64
device-mapper-debuginfo-1.02.212-2.amzn2027.aarch64
device-mapper-libs-1.02.212-2.amzn2027.aarch64
device-mapper-event-1.02.212-2.amzn2027.aarch64
lvm2-libs-debuginfo-2.03.38-2.amzn2027.aarch64
lvm2-lockd-2.03.38-2.amzn2027.aarch64
lvm2-testsuite-debuginfo-2.03.38-2.amzn2027.aarch64
lvm2-testsuite-2.03.38-2.amzn2027.aarch64
noarch:
lvm2-dbusd-2.03.38-2.amzn2027.noarch
src:
lvm2-2.03.38-2.amzn2027.src
x86_64:
device-mapper-debuginfo-1.02.212-2.amzn2027.x86_64
device-mapper-event-debuginfo-1.02.212-2.amzn2027.x86_64
lvm2-testsuite-debuginfo-2.03.38-2.amzn2027.x86_64
lvm2-devel-2.03.38-2.amzn2027.x86_64
lvm2-debuginfo-2.03.38-2.amzn2027.x86_64
device-mapper-libs-debuginfo-1.02.212-2.amzn2027.x86_64
device-mapper-devel-1.02.212-2.amzn2027.x86_64
lvm2-lockd-2.03.38-2.amzn2027.x86_64
lvm2-libs-2.03.38-2.amzn2027.x86_64
device-mapper-event-1.02.212-2.amzn2027.x86_64
device-mapper-event-libs-1.02.212-2.amzn2027.x86_64
lvm2-libs-debuginfo-2.03.38-2.amzn2027.x86_64
lvm2-2.03.38-2.amzn2027.x86_64
lvm2-debugsource-2.03.38-2.amzn2027.x86_64
lvm2-testsuite-2.03.38-2.amzn2027.x86_64
device-mapper-event-libs-debuginfo-1.02.212-2.amzn2027.x86_64
device-mapper-1.02.212-2.amzn2027.x86_64
device-mapper-event-devel-1.02.212-2.amzn2027.x86_64
device-mapper-libs-1.02.212-2.amzn2027.x86_64
lvm2-lockd-debuginfo-2.03.38-2.amzn2027.x86_64