ALAS2KERNEL-5.4-2026-120

Amazon Linux 2 Security Advisory: ALAS2KERNEL-5.4-2026-120
Advisory Released Date: 2026-05-05
Advisory Updated Date: 2026-05-05
Severity: Important
Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place

To mitigate this issue, we recommend that customers disable loading of the algif_aead module by running the following commands:

echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf

rmmod algif_aead 2>/dev/null || true

This issue requires local authenticated access as a prerequisite; remote unauthenticated activity is not possible. (CVE-2026-31431)


Affected Packages:

kernel


Note:

This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update kernel or yum update --advisory ALAS2KERNEL-5.4-2026-120 to update your system.
System reboot is required in order to complete this update.

New Packages:
aarch64:
    kernel-5.4.302-223.469.amzn2.aarch64
    kernel-headers-5.4.302-223.469.amzn2.aarch64
    kernel-debuginfo-common-aarch64-5.4.302-223.469.amzn2.aarch64
    perf-5.4.302-223.469.amzn2.aarch64
    perf-debuginfo-5.4.302-223.469.amzn2.aarch64
    python-perf-5.4.302-223.469.amzn2.aarch64
    python-perf-debuginfo-5.4.302-223.469.amzn2.aarch64
    kernel-tools-5.4.302-223.469.amzn2.aarch64
    kernel-tools-devel-5.4.302-223.469.amzn2.aarch64
    kernel-tools-debuginfo-5.4.302-223.469.amzn2.aarch64
    bpftool-5.4.302-223.469.amzn2.aarch64
    bpftool-debuginfo-5.4.302-223.469.amzn2.aarch64
    kernel-devel-5.4.302-223.469.amzn2.aarch64
    kernel-debuginfo-5.4.302-223.469.amzn2.aarch64

i686:
    kernel-headers-5.4.302-223.469.amzn2.i686

src:
    kernel-5.4.302-223.469.amzn2.src

x86_64:
    kernel-5.4.302-223.469.amzn2.x86_64
    kernel-headers-5.4.302-223.469.amzn2.x86_64
    kernel-debuginfo-common-x86_64-5.4.302-223.469.amzn2.x86_64
    perf-5.4.302-223.469.amzn2.x86_64
    perf-debuginfo-5.4.302-223.469.amzn2.x86_64
    python-perf-5.4.302-223.469.amzn2.x86_64
    python-perf-debuginfo-5.4.302-223.469.amzn2.x86_64
    kernel-tools-5.4.302-223.469.amzn2.x86_64
    kernel-tools-devel-5.4.302-223.469.amzn2.x86_64
    kernel-tools-debuginfo-5.4.302-223.469.amzn2.x86_64
    bpftool-5.4.302-223.469.amzn2.x86_64
    bpftool-debuginfo-5.4.302-223.469.amzn2.x86_64
    kernel-devel-5.4.302-223.469.amzn2.x86_64
    kernel-debuginfo-5.4.302-223.469.amzn2.x86_64

Additional References

Release Notes:  Amazon Linux 2 Release Notes

Red Hat: CVE-2026-31431

Mitre: CVE-2026-31431