ALAS2KERNEL-5.10-2026-136


Amazon Linux 2 (EOS) Security Advisory: ALAS2KERNEL-5.10-2026-136
Advisory Released Date: 2026-10-28
Advisory Updated Date: 2026-11-09
Severity: Important
References: CVE-2026-74496  CVE-2026-74743  CVE-2026-89481  CVE-2026-89638  CVE-2026-89648  CVE-2026-90227  CVE-2026-93287  CVE-2026-93785  CVE-2026-93795  CVE-2026-93798  CVE-2026-93800  CVE-2026-93817  CVE-2026-97416  CVE-2026-97417  CVE-2026-97420  CVE-2026-97421  CVE-2026-97430  CVE-2026-97441  CVE-2026-97444  CVE-2026-97445  CVE-2026-97446  CVE-2026-97448  CVE-2026-97449  CVE-2026-97450  CVE-2026-97451  CVE-2026-97452  CVE-2026-97453  CVE-2026-97454  CVE-2026-97455  CVE-2026-97456  CVE-2026-97472  CVE-2026-97476  CVE-2026-97481  CVE-2026-97483  CVE-2026-97484  CVE-2026-97523  CVE-2026-97524  CVE-2026-97557  CVE-2026-97568  CVE-2026-97572  CVE-2026-97573  CVE-2026-97596  CVE-2026-97598  CVE-2026-97611  CVE-2026-97612  CVE-2026-97899  CVE-2026-97904  CVE-2026-97905  CVE-2026-97940  CVE-2026-97951  CVE-2026-97958  CVE-2026-97959  CVE-2026-97995  CVE-2026-97998  CVE-2026-98010  CVE-2026-98011  CVE-2026-98012  CVE-2026-98015  CVE-2026-98022  CVE-2026-98023  CVE-2026-98025  CVE-2026-98063  CVE-2026-98064  CVE-2026-98068  CVE-2026-98069  CVE-2026-98070  CVE-2026-98071  CVE-2026-98072  CVE-2026-98074  CVE-2026-98076  CVE-2026-98077  CVE-2026-98078  CVE-2026-98080  CVE-2026-98091  CVE-2026-98095  CVE-2026-98123  CVE-2026-98157  CVE-2026-98158  CVE-2026-98197  CVE-2026-98201  CVE-2026-98202  CVE-2026-98205  CVE-2026-98207  CVE-2026-98208  CVE-2026-98217  CVE-2026-98222  CVE-2026-98233  CVE-2026-98234  CVE-2026-98241  CVE-2026-98251  CVE-2026-98252  CVE-2026-98253  CVE-2026-98255  CVE-2026-98260  CVE-2026-98262  CVE-2026-98276  CVE-2026-98299  CVE-2026-98300  CVE-2026-98306  CVE-2026-98319  CVE-2026-98320  CVE-2026-98322  CVE-2026-98342  CVE-2026-98343  CVE-2026-98344  CVE-2026-98347  CVE-2026-98354  CVE-2026-98357  CVE-2026-98358  CVE-2026-98362  CVE-2026-98363  CVE-2026-98364  CVE-2026-98379  CVE-2026-98380  CVE-2026-98383  CVE-2026-98388  CVE-2026-98404  CVE-2026-98413  CVE-2026-98419  CVE-2026-98479  CVE-2026-98485  CVE-2026-98488  CVE-2026-98489  CVE-2026-98491  CVE-2026-98494  CVE-2026-98495  CVE-2026-98499  CVE-2026-98531  CVE-2026-98532  CVE-2026-98537  CVE-2026-98541  CVE-2026-98547  CVE-2026-98548  CVE-2026-98550  CVE-2026-98553  CVE-2026-98554  CVE-2026-98567  CVE-2026-98569  CVE-2026-98573  CVE-2026-98590  CVE-2026-98594  CVE-2026-98597  CVE-2026-98608  CVE-2026-98609  CVE-2026-98610  CVE-2026-98612  CVE-2026-98614  CVE-2026-98621  CVE-2026-98624  CVE-2026-98625  CVE-2026-98631  CVE-2026-98636  CVE-2026-98643  CVE-2026-98873  CVE-2026-98877  CVE-2026-98879  CVE-2026-98881  CVE-2026-98888  CVE-2026-98899  CVE-2026-98900  CVE-2026-98902 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

fou: Fix use-after-free in fou_create() (CVE-2026-74496)

In the Linux kernel, the following vulnerability has been resolved:

macvlan: inherit needed_headroom and needed_tailroom from lowerdev (CVE-2026-74743)

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638)

In the Linux kernel, the following vulnerability has been resolved:

ceph: cap delegated inode count in ceph_parse_deleg_inos() (CVE-2026-89648)

In the Linux kernel, the following vulnerability has been resolved:

nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)

In the Linux kernel, the following vulnerability has been resolved:

i2c: smbus: reject oversized block transfers in the common path (CVE-2026-93287)

In the Linux kernel, the following vulnerability has been resolved:

cifs: validate idmap key payload length (CVE-2026-93785)

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: fix leaks and online flag on radix_tree_insert failure (CVE-2026-93795)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix reloc root cleanup in merge_reloc_roots() (CVE-2026-93798)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (CVE-2026-93800)

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix addr_filter_ranges lifetime (CVE-2026-93817)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (CVE-2026-97416)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

In the Linux kernel, the following vulnerability has been resolved:

bpf: NUL-terminate replaced sysctl value (CVE-2026-97420)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (CVE-2026-97421)

In the Linux kernel, the following vulnerability has been resolved:

xhci: Prevent queuing new commands if xhci is inaccessible (CVE-2026-97430)

In the Linux kernel, the following vulnerability has been resolved:

ata: ahci: fail probe if BAR too small for claimed ports (CVE-2026-97441)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: add boundary checks in two places (CVE-2026-97444)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (CVE-2026-97445)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (CVE-2026-97446)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Add validation for node in acpi_ns_build_normalized_path() (CVE-2026-97448)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Add package limit checks in parser functions (CVE-2026-97449)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: validate handler object type in two places (CVE-2026-97450)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (CVE-2026-97451)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Prevent adding invalid references (CVE-2026-97452)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: validate byte_count in acpi_ps_get_next_package_length() (CVE-2026-97453)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: add boundary checks in acpi_ps_get_next_field() (CVE-2026-97454)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (CVE-2026-97455)

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Fix condition check in acpi_ps_parse_loop() (CVE-2026-97456)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: addrconf: fix temp address generation after prefix deprecation (CVE-2026-97472)

In the Linux kernel, the following vulnerability has been resolved:

rds: filter RDS_INFO_* getsockopt by caller's netns (CVE-2026-97476)

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250: fix possible ISR soft lockup (CVE-2026-97481)

In the Linux kernel, the following vulnerability has been resolved:

usb: core: hcd: fix possible deadlock in rh control transfers (CVE-2026-97483)

In the Linux kernel, the following vulnerability has been resolved:

usbip: vhci_hcd: fix NULL deref in status_show_vhci (CVE-2026-97484)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: close race between scheduler and state change (CVE-2026-97523)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: avoid unneeded actions on subflow reset (CVE-2026-97524)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: avoid leaking refcount in cifs_queue_oplock_break() (CVE-2026-97557)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: syncookies: remember the request backup flag (CVE-2026-97568)

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (CVE-2026-97572)

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (CVE-2026-97573)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: reject invalid states in connection template sync records (CVE-2026-97596)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: fib: bound automatic table ID allocation (CVE-2026-97598)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: fix use-after-free of the flow table mask array (CVE-2026-97611)

In the Linux kernel, the following vulnerability has been resolved:

net: mpls: clear inner_protocol when the last label is popped (CVE-2026-97612)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Fix memory leak in query_perf_config_list() (CVE-2026-97899)

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: initialize policy rwsem before sysfs publication (CVE-2026-97904)

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: zero-initialize policy cpumask before sysfs publication (CVE-2026-97905)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix fib6 walker UAF on seq stop (CVE-2026-97940)

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands (CVE-2026-97951)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). (CVE-2026-97958)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: free emptied bucket on filter move (CVE-2026-97959)

In the Linux kernel, the following vulnerability has been resolved:

virtio_console: do not free control-out buffers on remove (CVE-2026-97995)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_log: cope with concurrent instance destruction (CVE-2026-97998)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: drr: clamp quantum in change class (CVE-2026-98010)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: hhf: clamp quantum in change and init paths (CVE-2026-98011)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sfq: clamp quantum in change path (CVE-2026-98012)

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (CVE-2026-98015)

In the Linux kernel, the following vulnerability has been resolved:

net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (CVE-2026-98022)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: reject dynamic fdb entries that reference a nexthop id (CVE-2026-98023)

In the Linux kernel, the following vulnerability has been resolved:

net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (CVE-2026-98025)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix NULL-ptr-deref in btf_var_show() (CVE-2026-98063)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix NULL-ptr-deref when showing a void BTF type (CVE-2026-98064)

In the Linux kernel, the following vulnerability has been resolved:

net/rds: don't let rds_conn_shutdown() consume a concurrent drop (CVE-2026-98068)

In the Linux kernel, the following vulnerability has been resolved:

net/rds: acquire the fastpath locks in rds_conn_shutdown() (CVE-2026-98069)

In the Linux kernel, the following vulnerability has been resolved:

net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (CVE-2026-98070)

In the Linux kernel, the following vulnerability has been resolved:

net/rds: clear cp_flags bits individually in rds_conn_path_reset() (CVE-2026-98071)

In the Linux kernel, the following vulnerability has been resolved:

net/rds: use wq_has_sleeper() in release_in_xmit() (CVE-2026-98072)

In the Linux kernel, the following vulnerability has been resolved:

bonding: do not clear curr_active_slave prematurely when releasing all slaves (CVE-2026-98074)

In the Linux kernel, the following vulnerability has been resolved:

tracing/probes: Fix use-after-free on field name/type of events with multiple probes (CVE-2026-98076)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (CVE-2026-98077)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix reversed sequence option serialization (CVE-2026-98078)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: do not force reloc root creation during qgroup_account_snapshot() (CVE-2026-98080)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: detach failed sprout device from transaction update list (CVE-2026-98091)

In the Linux kernel, the following vulnerability has been resolved:

af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). (CVE-2026-98095)

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration (CVE-2026-98123)

In the Linux kernel, the following vulnerability has been resolved:

EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation (CVE-2026-98157)

In the Linux kernel, the following vulnerability has been resolved:

ppp_async: drop the errored frame instead of resetting its headroom (CVE-2026-98158)

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (CVE-2026-98197)

In the Linux kernel, the following vulnerability has been resolved:

Input: zero ff_effect before compat copy in input_ff_effect_from_user (CVE-2026-98201)

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (CVE-2026-98202)

In the Linux kernel, the following vulnerability has been resolved:

Input: evdev - zero absinfo before partial copy in EVIOCSABS (CVE-2026-98205)

In the Linux kernel, the following vulnerability has been resolved:

mmc: spi: reset bytes_xfered before retrying CRC failures (CVE-2026-98207)

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdio_uart: fix xmit_fifo leak when the port table is full (CVE-2026-98208)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx4: Fix use-after-free on pkey sysfs registration failure (CVE-2026-98217)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

In the Linux kernel, the following vulnerability has been resolved:

net/packet: clear RX owner on VNET header error (CVE-2026-98233)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: hhf: cap hh_flows_limit at change time (CVE-2026-98234)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: xfrm: use full sockets in local error paths (CVE-2026-98241)

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: avoid reallocating confirmed conntrack labels (CVE-2026-98251)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (CVE-2026-98252)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/ucma: Serialize join and leave on copy_to_user failure (CVE-2026-98253)

In the Linux kernel, the following vulnerability has been resolved:

tcp: exclude old ACKs from tcp fast path (CVE-2026-98255)

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

In the Linux kernel, the following vulnerability has been resolved:

ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY (CVE-2026-98262)

In the Linux kernel, the following vulnerability has been resolved:

net: lock the socket in sock_gettstamp() (CVE-2026-98276)

In the Linux kernel, the following vulnerability has been resolved:

tcp: do not let tcp_rmem be set below 4096 (CVE-2026-98299)

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). (CVE-2026-98300)

In the Linux kernel, the following vulnerability has been resolved:

seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (CVE-2026-98306)

In the Linux kernel, the following vulnerability has been resolved:

drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (CVE-2026-98319)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_nat: fully initialise new_addr in netmap setup (CVE-2026-98322)

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: wait for RCU readers before releasing dma_device (CVE-2026-98342)

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (CVE-2026-98343)

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: Fix device kref underflow in dma_chan_put() (CVE-2026-98344)

In the Linux kernel, the following vulnerability has been resolved:

IB/IPoIB: Avoid restoring OPER_UP after multicast flush (CVE-2026-98347)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mad: Fix receive buffer leak when PKey enforcement fails (CVE-2026-98354)

In the Linux kernel, the following vulnerability has been resolved:

IB/isert: wait for deferred control PDU completions before releasing the connection (CVE-2026-98357)

In the Linux kernel, the following vulnerability has been resolved:

IB/iser: reject a remote invalidation of an unregistered direction (CVE-2026-98358)

In the Linux kernel, the following vulnerability has been resolved:

clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate (CVE-2026-98362)

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (CVE-2026-98363)

In the Linux kernel, the following vulnerability has been resolved:

xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ip6t_rpfilter: reject routes without inet6_dev (CVE-2026-98379)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: reject IDR error pointers when deleting actions (CVE-2026-98380)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL (CVE-2026-98383)

In the Linux kernel, the following vulnerability has been resolved:

exec: do_close_on_exec() before taking exec_update_lock (CVE-2026-98388)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (CVE-2026-98404)

In the Linux kernel, the following vulnerability has been resolved:

selinux: always fill AVC decision in avc_has_perm_noaudit() (CVE-2026-98413)

In the Linux kernel, the following vulnerability has been resolved:

drop_monitor: fix out-of-bounds write in reset_per_cpu_data() (CVE-2026-98419)

In the Linux kernel, the following vulnerability has been resolved:

scsi: libiscsi_tcp: Check the data direction of a Data-In PDU (CVE-2026-98479)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read (CVE-2026-98485)

In the Linux kernel, the following vulnerability has been resolved:

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read (CVE-2026-98488)

In the Linux kernel, the following vulnerability has been resolved:

net: atl1c: fix soft lockup on out-of-range tpd_cons read (CVE-2026-98489)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry (CVE-2026-98491)

In the Linux kernel, the following vulnerability has been resolved:

net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read (CVE-2026-98494)

In the Linux kernel, the following vulnerability has been resolved:

net: arp: terminate device name before lookup (CVE-2026-98495)

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (CVE-2026-98499)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST (CVE-2026-98531)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: do not let ipv6_find_hdr() return an offset past the packet end (CVE-2026-98532)

In the Linux kernel, the following vulnerability has been resolved:

workqueue: Fix NULL current_pwq deref in flush dependency check (CVE-2026-98537)

In the Linux kernel, the following vulnerability has been resolved:

fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT (CVE-2026-98541)

In the Linux kernel, the following vulnerability has been resolved:

af_packet: fix integer overflow in prb_calc_retire_blk_tmo() (CVE-2026-98547)

In the Linux kernel, the following vulnerability has been resolved:

sctp: discard the rest of the packet on a stale-cookie error (CVE-2026-98548)

In the Linux kernel, the following vulnerability has been resolved:

tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow (CVE-2026-98550)

In the Linux kernel, the following vulnerability has been resolved:

autofs: fix sbi->pipe file reference leak in autofs_kill_sb() (CVE-2026-98553)

In the Linux kernel, the following vulnerability has been resolved:

vlan: ensure sufficient headroom in vlan_dev_hard_header() (CVE-2026-98554)

In the Linux kernel, the following vulnerability has been resolved:

net: xps: reject an out of range traffic class (CVE-2026-98567)

In the Linux kernel, the following vulnerability has been resolved:

ip_gre: Reject enabling collect metadata through changelink (CVE-2026-98569)

In the Linux kernel, the following vulnerability has been resolved:

net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() (CVE-2026-98573)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix bpf_sock context code generation (CVE-2026-98590)

In the Linux kernel, the following vulnerability has been resolved:

tg3: clean up PHYLIB resources on probe failure (CVE-2026-98594)

In the Linux kernel, the following vulnerability has been resolved:

net: usb: sr9700: include receive overhead in the length check (CVE-2026-98597)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (CVE-2026-98608)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leak when drm_gem_handle_create() fails (CVE-2026-98609)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget (CVE-2026-98610)

In the Linux kernel, the following vulnerability has been resolved:

net: usb: catc: bound the RX packet length in catc_rx_done() (CVE-2026-98612)

In the Linux kernel, the following vulnerability has been resolved:

sctp: avoid livelock while updating retransmit path (CVE-2026-98614)

In the Linux kernel, the following vulnerability has been resolved:

net: gue: reject invalid REMCSUM offsets (CVE-2026-98621)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_queue: hold nfnl mutex in event notifier (CVE-2026-98624)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: publish HW_DEAD after worker is done (CVE-2026-98625)

In the Linux kernel, the following vulnerability has been resolved:

xsk: Use a 32-bit compare in xsk_map_gen_lookup (CVE-2026-98631)

In the Linux kernel, the following vulnerability has been resolved:

squashfs: Add dictionary size range check to prevent shift-out-of-bounds (CVE-2026-98636)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix out-of-bounds read of rtt_min in sock_ops (CVE-2026-98643)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_expect: zero at allocation time (CVE-2026-98873)

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed (CVE-2026-98877)

In the Linux kernel, the following vulnerability has been resolved:

isofs: handle set_blocksize failures (CVE-2026-98879)

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() (CVE-2026-98881)

In the Linux kernel, the following vulnerability has been resolved:

arm64: kprobes: Allow reentering kprobes while single-stepping (CVE-2026-98888)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: mark the rcu locked areas properly (CVE-2026-98899)

In the Linux kernel, the following vulnerability has been resolved:

xen/gntalloc: validate grant count before allocation (CVE-2026-98900)

In the Linux kernel, the following vulnerability has been resolved:

md/raid5: let stripe batch bm_seq comparison wrap-safe (CVE-2026-98902)


Affected Packages:

kernel


Note:

This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update kernel or yum update --advisory ALAS2KERNEL-5.10-2026-136 to update your system.
System reboot is required in order to complete this update.

New Packages:
aarch64:
    kernel-5.10.271-272.1120.amzn2.aarch64
    kernel-headers-5.10.271-272.1120.amzn2.aarch64
    kernel-debuginfo-common-aarch64-5.10.271-272.1120.amzn2.aarch64
    perf-5.10.271-272.1120.amzn2.aarch64
    perf-debuginfo-5.10.271-272.1120.amzn2.aarch64
    python-perf-5.10.271-272.1120.amzn2.aarch64
    python-perf-debuginfo-5.10.271-272.1120.amzn2.aarch64
    kernel-tools-5.10.271-272.1120.amzn2.aarch64
    kernel-tools-devel-5.10.271-272.1120.amzn2.aarch64
    kernel-tools-debuginfo-5.10.271-272.1120.amzn2.aarch64
    bpftool-5.10.271-272.1120.amzn2.aarch64
    bpftool-debuginfo-5.10.271-272.1120.amzn2.aarch64
    kernel-devel-5.10.271-272.1120.amzn2.aarch64
    kernel-debuginfo-5.10.271-272.1120.amzn2.aarch64
    kernel-livepatch-5.10.271-272.1120-1.0-0.amzn2.aarch64

i686:
    kernel-headers-5.10.271-272.1120.amzn2.i686

src:
    kernel-5.10.271-272.1120.amzn2.src

x86_64:
    kernel-5.10.271-272.1120.amzn2.x86_64
    kernel-headers-5.10.271-272.1120.amzn2.x86_64
    kernel-debuginfo-common-x86_64-5.10.271-272.1120.amzn2.x86_64
    perf-5.10.271-272.1120.amzn2.x86_64
    perf-debuginfo-5.10.271-272.1120.amzn2.x86_64
    python-perf-5.10.271-272.1120.amzn2.x86_64
    python-perf-debuginfo-5.10.271-272.1120.amzn2.x86_64
    kernel-tools-5.10.271-272.1120.amzn2.x86_64
    kernel-tools-devel-5.10.271-272.1120.amzn2.x86_64
    kernel-tools-debuginfo-5.10.271-272.1120.amzn2.x86_64
    bpftool-5.10.271-272.1120.amzn2.x86_64
    bpftool-debuginfo-5.10.271-272.1120.amzn2.x86_64
    kernel-devel-5.10.271-272.1120.amzn2.x86_64
    kernel-debuginfo-5.10.271-272.1120.amzn2.x86_64
    kernel-livepatch-5.10.271-272.1120-1.0-0.amzn2.x86_64