Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2026-287
Advisory Released Date: 2026-05-05
Advisory Updated Date: 2026-05-05
Severity:
Important
Issue Overview:
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
To mitigate this issue, we recommend that customers disable loading of the algif_aead module by running the following commands:
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true
This issue requires local authenticated access as a prerequisite; remote unauthenticated activity is not possible. (CVE-2026-31431)
Affected Packages:
kernel-livepatch-5.10.248-247.988
Issue Correction:
Please ensure you have live patching enabled. Run yum update kernel-livepatch-5.10.248-247.988 or yum update --advisory ALAS2LIVEPATCH-2026-287 to update your system.
New Packages:
aarch64:
kernel-livepatch-5.10.248-247.988-1.0-1.amzn2.aarch64
src:
kernel-livepatch-5.10.248-247.988-1.0-1.amzn2.src
x86_64:
kernel-livepatch-5.10.248-247.988-1.0-1.amzn2.x86_64