Amazon Linux 2023 Security Advisory: ALAS2023-2026-3251
Advisory Released Date: 2026-10-24
Advisory Updated Date: 2026-10-26
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF in sock clone early bailouts (CVE-2026-68399)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: initialize inode mapping flags for cached inodes (CVE-2026-80734)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark NULL kptr stores precise (CVE-2026-98034)
In the Linux kernel, the following vulnerability has been resolved:
bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks (CVE-2026-98084)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)
In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: preserve mremap address delta when skipping page tables (CVE-2026-98373)
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (CVE-2026-98374)
In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: drop RX packets with a short Ethernet header (CVE-2026-98375)
In the Linux kernel, the following vulnerability has been resolved:
vlan: require the MAC header to be present in __vlan_insert_inner_tag() (CVE-2026-98377)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip unsettled links in link iterator (CVE-2026-98378)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_rpfilter: reject routes without inet6_dev (CVE-2026-98379)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: reject IDR error pointers when deleting actions (CVE-2026-98380)
In the Linux kernel, the following vulnerability has been resolved:
veth: manage XDP program pointers during channel resize (CVE-2026-98381)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject dev-bound-only programs on other devices (CVE-2026-98382)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL (CVE-2026-98383)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() (CVE-2026-98384)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction (CVE-2026-98440)
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix cursor and pointer handling when recovering iunlink buckets (CVE-2026-98443)
In the Linux kernel, the following vulnerability has been resolved:
xfs: don't let hidden_space go negative in xfs_metafile_resv_init (CVE-2026-98446)
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots (CVE-2026-98447)
In the Linux kernel, the following vulnerability has been resolved:
xfs: release orphanage dir inode if chown fails (CVE-2026-98448)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: close completed creates on compound wait errors (CVE-2026-98450)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: use finish_no_open() for non-regular inodes (CVE-2026-98451)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: clean up failed cached directory opens (CVE-2026-98452)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: close handle after create-context parsing failure (CVE-2026-98453)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix create context out-of-bounds reads (CVE-2026-98454)
In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags (CVE-2026-98463)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race (CVE-2026-98467)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix spurious warning for benign stage 2 teardown race (CVE-2026-98468)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix AArch32 DBGBXVR<n> handling (CVE-2026-98469)
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() (CVE-2026-98477)
In the Linux kernel, the following vulnerability has been resolved:
scsi: libiscsi_tcp: Check the data direction of a Data-In PDU (CVE-2026-98479)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: skip expired catchall elements on insert and delete (CVE-2026-98484)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read (CVE-2026-98485)
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mdb: restart port group walk after deletion (CVE-2026-98487)
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: conntrack: fix helper UAF due to extensions realloc (CVE-2026-98490)
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry (CVE-2026-98491)
In the Linux kernel, the following vulnerability has been resolved:
net: arp: terminate device name before lookup (CVE-2026-98495)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix swapped IPv6 IPsec policy masks (CVE-2026-98497)
In the Linux kernel, the following vulnerability has been resolved:
packet: use ubuf_info completion for TX_RING packets (CVE-2026-98503)
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() (CVE-2026-98505)
In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: do not dissolve gigantic pages without runtime support (CVE-2026-98506)
In the Linux kernel, the following vulnerability has been resolved:
mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (CVE-2026-98507)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: fix NULL pointer dereference on fence allocation failure (CVE-2026-98508)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: fix memory leak of fence event on execbuffer failure (CVE-2026-98509)
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: fix incorrect RCU teardown order (CVE-2026-98521)
In the Linux kernel, the following vulnerability has been resolved:
drm/client: fix restore of partially initialized client (CVE-2026-98523)
In the Linux kernel, the following vulnerability has been resolved:
gpio: cdev: fix kernel stack leak to user-space in error path (CVE-2026-98528)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST (CVE-2026-98531)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: do not let ipv6_find_hdr() return an offset past the packet end (CVE-2026-98532)
In the Linux kernel, the following vulnerability has been resolved:
writeback: report a Tasks-RCU quiescent state per cgwb drain pass (CVE-2026-98536)
In the Linux kernel, the following vulnerability has been resolved:
workqueue: Fix NULL current_pwq deref in flush dependency check (CVE-2026-98537)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga (CVE-2026-98539)
In the Linux kernel, the following vulnerability has been resolved:
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT (CVE-2026-98541)
In the Linux kernel, the following vulnerability has been resolved:
cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict (CVE-2026-98542)
In the Linux kernel, the following vulnerability has been resolved:
bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir (CVE-2026-98543)
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-scsi: bound the ATA passthru sense descriptor writes (CVE-2026-98545)
In the Linux kernel, the following vulnerability has been resolved:
af_packet: fix integer overflow in prb_calc_retire_blk_tmo() (CVE-2026-98547)
In the Linux kernel, the following vulnerability has been resolved:
sctp: discard the rest of the packet on a stale-cookie error (CVE-2026-98548)
In the Linux kernel, the following vulnerability has been resolved:
tcp: prevent collapsing skbs across boundary in rtx queue (CVE-2026-98549)
In the Linux kernel, the following vulnerability has been resolved:
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow (CVE-2026-98550)
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Fix a refcount leak in attach_perf_ctx_data() (CVE-2026-98552)
In the Linux kernel, the following vulnerability has been resolved:
autofs: fix sbi->pipe file reference leak in autofs_kill_sb() (CVE-2026-98553)
In the Linux kernel, the following vulnerability has been resolved:
vlan: ensure sufficient headroom in vlan_dev_hard_header() (CVE-2026-98554)
In the Linux kernel, the following vulnerability has been resolved:
net: xps: reject an out of range traffic class (CVE-2026-98567)
In the Linux kernel, the following vulnerability has been resolved:
vxlan: use one headroom snapshot for neighbour replies (CVE-2026-98568)
In the Linux kernel, the following vulnerability has been resolved:
ip_gre: Reject enabling collect metadata through changelink (CVE-2026-98569)
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() (CVE-2026-98573)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: fix potential stack infoleak in em_text_dump() (CVE-2026-98584)
In the Linux kernel, the following vulnerability has been resolved:
sctp: hold asoc or transport before mod_timer() in timer handlers (CVE-2026-98586)
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc (CVE-2026-98588)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix bpf_sock context code generation (CVE-2026-98590)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix bounds check for skb-backed dynptrs (CVE-2026-98591)
In the Linux kernel, the following vulnerability has been resolved:
udp: remove a disconnected socket from the 4-tuple hash table (CVE-2026-98595)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix dst leak for uncached routes. (CVE-2026-98596)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Prevent rt6_insert_exception() for dying fib6_info. (CVE-2026-98598)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (CVE-2026-98606)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (CVE-2026-98607)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (CVE-2026-98608)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: fix object leak when drm_gem_handle_create() fails (CVE-2026-98609)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget (CVE-2026-98610)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Check params size before reading reserved fields (CVE-2026-98611)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Bound ownership depth through local kptrs and graph roots (CVE-2026-98613)
In the Linux kernel, the following vulnerability has been resolved:
sctp: avoid livelock while updating retransmit path (CVE-2026-98614)
In the Linux kernel, the following vulnerability has been resolved:
net: gue: reject invalid REMCSUM offsets (CVE-2026-98621)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_queue: hold nfnl mutex in event notifier (CVE-2026-98624)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: publish HW_DEAD after worker is done (CVE-2026-98625)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Restrict CO-RE poisoning to relocatable instructions (CVE-2026-98626)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: fix manual hash table handle IDR aliasing (CVE-2026-98629)
In the Linux kernel, the following vulnerability has been resolved:
xsk: Use a 32-bit compare in xsk_map_gen_lookup (CVE-2026-98631)
In the Linux kernel, the following vulnerability has been resolved:
scsi: sd_zbc: Reject disks with too many zones (CVE-2026-98634)
In the Linux kernel, the following vulnerability has been resolved:
squashfs: Add dictionary size range check to prevent shift-out-of-bounds (CVE-2026-98636)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (CVE-2026-98637)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (CVE-2026-98638)
In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: set up the frame pointer for the exception callback (CVE-2026-98641)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk (CVE-2026-98642)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix out-of-bounds read of rtt_min in sock_ops (CVE-2026-98643)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() (CVE-2026-98644)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context (CVE-2026-98646)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix divide-by-zero in btf_struct_walk() (CVE-2026-98647)
In the Linux kernel, the following vulnerability has been resolved:
perf: Require kernel access for text poke events (CVE-2026-98655)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (CVE-2026-98681)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: flush dirty data before zeroing a range (CVE-2026-98683)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: flush and commit data before querying allocated ranges (CVE-2026-98684)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: discard post-EOF pagecache when extending a file via zero range (CVE-2026-98686)
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: fix ioctl hangup race (CVE-2026-98695)
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: fix driver deregistration order (CVE-2026-98696)
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: fix dynamic id driver deregistration race (CVE-2026-98697)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (CVE-2026-98713)
In the Linux kernel, the following vulnerability has been resolved:
KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted (CVE-2026-98716)
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (CVE-2026-98717)
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (CVE-2026-98720)
In the Linux kernel, the following vulnerability has been resolved:
tpm: fix off-by-four bounds check in tpm2_get_random() (CVE-2026-98728)
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h (CVE-2026-98729)
In the Linux kernel, the following vulnerability has been resolved:
arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (CVE-2026-98745)
In the Linux kernel, the following vulnerability has been resolved:
tty: fix saved termios reset race (CVE-2026-98750)
In the Linux kernel, the following vulnerability has been resolved:
tty: abort break signalling on hangup (CVE-2026-98751)
In the Linux kernel, the following vulnerability has been resolved:
tty: port: fix tty_port_tty_vhangup() race (CVE-2026-98752)
In the Linux kernel, the following vulnerability has been resolved:
tty: tty_port: restore TTY_IO_ERROR on activation failure (CVE-2026-98753)
In the Linux kernel, the following vulnerability has been resolved:
usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (CVE-2026-98763)
In the Linux kernel, the following vulnerability has been resolved:
usb: storage: sierra_ms: reject short SWoC info transfers (CVE-2026-98771)
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: fix port tear down use-after-free (CVE-2026-98772)
In the Linux kernel, the following vulnerability has been resolved:
USB: cdc-acm: skip URB restart in port_shutdown if disconnected (CVE-2026-98773)
In the Linux kernel, the following vulnerability has been resolved:
nitro_enclaves: fix use-after-free on SLOT_ALLOC failure (CVE-2026-98775)
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix race between perf_event_exit_task() and perf_pending_task() (CVE-2026-98790)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference (CVE-2026-98791)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: generalize pending status bit (CVE-2026-98792)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: bpf: reject invalid NAT manipulation types (CVE-2026-98793)
In the Linux kernel, the following vulnerability has been resolved:
ipvs: filter some flags received in the backup server (CVE-2026-98794)
In the Linux kernel, the following vulnerability has been resolved:
net: cap skb->queue_mapping when the tx queue is picked (CVE-2026-98797)
In the Linux kernel, the following vulnerability has been resolved:
net: restrict SO_RESERVE_MEM to TCP sockets and cap max value (CVE-2026-98801)
In the Linux kernel, the following vulnerability has been resolved:
net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() (CVE-2026-98804)
In the Linux kernel, the following vulnerability has been resolved:
tipc: prevent GCM nonce reuse on peer key changes (CVE-2026-98805)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix slab-out-of-bounds when handling team device events (CVE-2026-98807)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_api: reclaim an empty proto on the error path (CVE-2026-98811)
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: set RQF_USE_SCHED when the operation is known (CVE-2026-98820)
In the Linux kernel, the following vulnerability has been resolved:
block: reject polled dio with user integrity metadata (CVE-2026-98821)
In the Linux kernel, the following vulnerability has been resolved:
of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)
In the Linux kernel, the following vulnerability has been resolved:
mtd: core: call _get_device() with the master MTD (CVE-2026-98833)
In the Linux kernel, the following vulnerability has been resolved:
vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() (CVE-2026-98839)
In the Linux kernel, the following vulnerability has been resolved:
vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (CVE-2026-98840)
In the Linux kernel, the following vulnerability has been resolved:
virt: vmgenid: set driver_data before registering notification handlers (CVE-2026-98841)
In the Linux kernel, the following vulnerability has been resolved:
module: fix lost error code from codetag_load_module() (CVE-2026-98842)
In the Linux kernel, the following vulnerability has been resolved:
netfs: zero gaps in read-gaps folio to avoid writing back stale data (CVE-2026-98843)
In the Linux kernel, the following vulnerability has been resolved:
netfs: clear post-EOF pagecache when extending a file via write (CVE-2026-98844)
In the Linux kernel, the following vulnerability has been resolved:
tpm: Disable TPM on null key name mismatch (CVE-2026-98845)
In the Linux kernel, the following vulnerability has been resolved:
sctp: check RCV_SHUTDOWN after the sendmsg connect wait (CVE-2026-98846)
In the Linux kernel, the following vulnerability has been resolved:
net/packet: prevent TX_RING byte count overflow (CVE-2026-98850)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_flow_offload: drop flowtable reference on init error path (CVE-2026-98851)
In the Linux kernel, the following vulnerability has been resolved:
net: extend IPv6 exthdr detection of tunneled packets (CVE-2026-98852)
In the Linux kernel, the following vulnerability has been resolved:
of/overlay: only treat a positive changeset id as registered (CVE-2026-98854)
In the Linux kernel, the following vulnerability has been resolved:
of/overlay: put property on deadprops only after changeset add succeeds (CVE-2026-98855)
In the Linux kernel, the following vulnerability has been resolved:
kprobes: Skip disarmed probes when checking optkprobe overlap (CVE-2026-98856)
In the Linux kernel, the following vulnerability has been resolved:
ipvs: bound LBLCR and LBLC cache growth (CVE-2026-98857)
In the Linux kernel, the following vulnerability has been resolved:
io_uring: fix task_work add use-after-free with SQPOLL (CVE-2026-98858)
In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: stop the release timer from being rearmed on remove (CVE-2026-98859)
In the Linux kernel, the following vulnerability has been resolved:
audit: fix exe mark UAF in kill_rules() (CVE-2026-98862)
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (CVE-2026-98863)
In the Linux kernel, the following vulnerability has been resolved:
arm64: io: Reject non-user protection in ioremap_prot() (CVE-2026-98923)
In the Linux kernel, the following vulnerability has been resolved:
fs: avoid repeated scans in evict_inodes() (CVE-2026-98924)
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix self-redirect copied_seq double-counting (CVE-2026-98925)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Fix life cycle of the nested_mmus array (CVE-2026-98927)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 (CVE-2026-98928)
In the Linux kernel, the following vulnerability has been resolved:
usb: hub: use shorter 120ms post resume hold for SS root hubs (CVE-2026-98933)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() (CVE-2026-98934)
In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (CVE-2026-98935)
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Check kernel access when kernel callchains are requested (CVE-2026-98937)
Affected Packages:
kernel6.18
Issue Correction:
Run dnf update kernel6.18 --releasever 2023.12.20261026 or dnf update --advisory ALAS2023-2026-3251 --releasever 2023.12.20261026 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
aarch64:
kernel6.18-modules-extra-common-6.18.56-125.164.amzn2023.aarch64
perf6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-tools-devel-6.18.56-125.164.amzn2023.aarch64
python3-perf6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-tools-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-headers-6.18.56-125.164.amzn2023.aarch64
python3-perf6.18-6.18.56-125.164.amzn2023.aarch64
kernel-livepatch-6.18.56-125.164-1.0-0.amzn2023.aarch64
microvm-kernel6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-tools-6.18.56-125.164.amzn2023.aarch64
bpftool6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
bpftool6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-modules-extra-6.18.56-125.164.amzn2023.aarch64
perf6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-debuginfo-common-aarch64-6.18.56-125.164.amzn2023.aarch64
kernel6.18-devel-6.18.56-125.164.amzn2023.aarch64
src:
kernel6.18-6.18.56-125.164.amzn2023.src
x86_64:
microvm-kernel6.18-6.18.56-125.164.amzn2023.x86_64
python3-perf6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
kernel6.18-modules-extra-6.18.56-125.164.amzn2023.x86_64
kernel-livepatch-6.18.56-125.164-1.0-0.amzn2023.x86_64
bpftool6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
perf6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
bpftool6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-tools-debuginfo-6.18.56-125.164.amzn2023.x86_64
kernel6.18-tools-devel-6.18.56-125.164.amzn2023.x86_64
kernel6.18-modules-extra-common-6.18.56-125.164.amzn2023.x86_64
python3-perf6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-tools-6.18.56-125.164.amzn2023.x86_64
perf6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
kernel6.18-headers-6.18.56-125.164.amzn2023.x86_64
kernel6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-debuginfo-common-x86_64-6.18.56-125.164.amzn2023.x86_64
kernel6.18-devel-6.18.56-125.164.amzn2023.x86_64
2026-10-26: CVE-2026-98842 was added to this advisory.
2026-10-26: CVE-2026-98450 was added to this advisory.
2026-10-26: CVE-2026-98452 was added to this advisory.
2026-10-26: CVE-2026-98624 was added to this advisory.
2026-10-26: CVE-2026-98485 was added to this advisory.
2026-10-26: CVE-2026-98821 was added to this advisory.
2026-10-26: CVE-2026-98637 was added to this advisory.
2026-10-26: CVE-2026-98484 was added to this advisory.
2026-10-26: CVE-2026-98720 was added to this advisory.
2026-10-26: CVE-2026-98451 was added to this advisory.
2026-10-26: CVE-2026-98454 was added to this advisory.
2026-10-26: CVE-2026-98608 was added to this advisory.
2026-10-26: CVE-2026-98852 was added to this advisory.
2026-10-26: CVE-2026-98549 was added to this advisory.
2026-10-26: CVE-2026-98641 was added to this advisory.
2026-10-26: CVE-2026-98541 was added to this advisory.
2026-10-26: CVE-2026-98506 was added to this advisory.
2026-10-26: CVE-2026-98536 was added to this advisory.
2026-10-26: CVE-2026-98453 was added to this advisory.
2026-10-26: CVE-2026-98490 was added to this advisory.
2026-10-26: CVE-2026-98550 was added to this advisory.
2026-10-26: CVE-2026-98440 was added to this advisory.
2026-10-26: CVE-2026-98479 was added to this advisory.
2026-10-26: CVE-2026-98752 was added to this advisory.
2026-10-26: CVE-2026-98642 was added to this advisory.
2026-10-26: CVE-2026-98851 was added to this advisory.
2026-10-26: CVE-2026-98643 was added to this advisory.
2026-10-26: CVE-2026-98790 was added to this advisory.
2026-10-26: CVE-2026-98638 was added to this advisory.
2026-10-26: CVE-2026-98844 was added to this advisory.
2026-10-26: CVE-2026-98477 was added to this advisory.
2026-10-26: CVE-2026-98833 was added to this advisory.
2026-10-26: CVE-2026-98595 was added to this advisory.
2026-10-26: CVE-2026-98586 was added to this advisory.
2026-10-26: CVE-2026-98613 was added to this advisory.
2026-10-26: CVE-2026-98773 was added to this advisory.
2026-10-26: CVE-2026-98850 was added to this advisory.
2026-10-26: CVE-2026-98646 was added to this advisory.
2026-10-26: CVE-2026-98924 was added to this advisory.
2026-10-26: CVE-2026-98508 was added to this advisory.
2026-10-26: CVE-2026-98569 was added to this advisory.
2026-10-26: CVE-2026-98542 was added to this advisory.
2026-10-26: CVE-2026-98862 was added to this advisory.
2026-10-26: CVE-2026-98859 was added to this advisory.
2026-10-26: CVE-2026-98523 was added to this advisory.
2026-10-26: CVE-2026-98545 was added to this advisory.
2026-10-26: CVE-2026-98753 was added to this advisory.
2026-10-26: CVE-2026-98804 was added to this advisory.
2026-10-26: CVE-2026-98805 was added to this advisory.
2026-10-26: CVE-2026-98937 was added to this advisory.
2026-10-26: CVE-2026-98858 was added to this advisory.
2026-10-26: CVE-2026-98771 was added to this advisory.
2026-10-26: CVE-2026-98606 was added to this advisory.
2026-10-26: CVE-2026-98588 was added to this advisory.
2026-10-26: CVE-2026-98683 was added to this advisory.
2026-10-26: CVE-2026-98621 was added to this advisory.
2026-10-26: CVE-2026-98573 was added to this advisory.
2026-10-26: CVE-2026-98935 was added to this advisory.
2026-10-26: CVE-2026-98447 was added to this advisory.
2026-10-26: CVE-2026-98841 was added to this advisory.
2026-10-26: CVE-2026-98925 was added to this advisory.
2026-10-26: CVE-2026-98448 was added to this advisory.
2026-10-26: CVE-2026-98697 was added to this advisory.
2026-10-26: CVE-2026-98792 was added to this advisory.
2026-10-26: CVE-2026-98686 was added to this advisory.
2026-10-26: CVE-2026-98607 was added to this advisory.
2026-10-26: CVE-2026-98554 was added to this advisory.
2026-10-26: CVE-2026-98831 was added to this advisory.
2026-10-26: CVE-2026-98791 was added to this advisory.
2026-10-26: CVE-2026-98793 was added to this advisory.
2026-10-26: CVE-2026-98631 was added to this advisory.
2026-10-26: CVE-2026-98611 was added to this advisory.
2026-10-26: CVE-2026-98469 was added to this advisory.
2026-10-26: CVE-2026-98750 was added to this advisory.
2026-10-26: CVE-2026-98503 was added to this advisory.
2026-10-26: CVE-2026-98614 was added to this advisory.
2026-10-26: CVE-2026-98553 was added to this advisory.
2026-10-26: CVE-2026-98548 was added to this advisory.
2026-10-26: CVE-2026-98521 was added to this advisory.
2026-10-26: CVE-2026-98625 was added to this advisory.
2026-10-26: CVE-2026-98446 was added to this advisory.
2026-10-26: CVE-2026-98797 was added to this advisory.
2026-10-26: CVE-2026-98820 was added to this advisory.
2026-10-26: CVE-2026-98843 was added to this advisory.
2026-10-26: CVE-2026-98539 was added to this advisory.
2026-10-26: CVE-2026-98713 was added to this advisory.
2026-10-26: CVE-2026-98923 was added to this advisory.
2026-10-26: CVE-2026-98857 was added to this advisory.
2026-10-26: CVE-2026-98507 was added to this advisory.
2026-10-26: CVE-2026-98629 was added to this advisory.
2026-10-26: CVE-2026-98598 was added to this advisory.
2026-10-26: CVE-2026-98928 was added to this advisory.
2026-10-26: CVE-2026-98468 was added to this advisory.
2026-10-26: CVE-2026-98591 was added to this advisory.
2026-10-26: CVE-2026-98495 was added to this advisory.
2026-10-26: CVE-2026-98934 was added to this advisory.
2026-10-26: CVE-2026-98487 was added to this advisory.
2026-10-26: CVE-2026-98846 was added to this advisory.
2026-10-26: CVE-2026-98751 was added to this advisory.
2026-10-26: CVE-2026-98528 was added to this advisory.
2026-10-26: CVE-2026-98636 was added to this advisory.
2026-10-26: CVE-2026-98811 was added to this advisory.
2026-10-26: CVE-2026-98801 was added to this advisory.
2026-10-26: CVE-2026-98728 was added to this advisory.
2026-10-26: CVE-2026-98497 was added to this advisory.
2026-10-26: CVE-2026-98775 was added to this advisory.
2026-10-26: CVE-2026-98634 was added to this advisory.
2026-10-26: CVE-2026-98863 was added to this advisory.
2026-10-26: CVE-2026-98609 was added to this advisory.
2026-10-26: CVE-2026-98655 was added to this advisory.
2026-10-26: CVE-2026-98584 was added to this advisory.
2026-10-26: CVE-2026-98547 was added to this advisory.
2026-10-26: CVE-2026-98443 was added to this advisory.
2026-10-26: CVE-2026-98684 was added to this advisory.
2026-10-26: CVE-2026-98933 was added to this advisory.
2026-10-26: CVE-2026-98505 was added to this advisory.
2026-10-26: CVE-2026-98596 was added to this advisory.
2026-10-26: CVE-2026-98567 was added to this advisory.
2026-10-26: CVE-2026-98647 was added to this advisory.
2026-10-26: CVE-2026-98463 was added to this advisory.
2026-10-26: CVE-2026-98610 was added to this advisory.
2026-10-26: CVE-2026-98794 was added to this advisory.
2026-10-26: CVE-2026-98466 was added to this advisory.
2026-10-26: CVE-2026-98491 was added to this advisory.
2026-10-26: CVE-2026-98568 was added to this advisory.
2026-10-26: CVE-2026-98854 was added to this advisory.
2026-10-26: CVE-2026-98927 was added to this advisory.
2026-10-26: CVE-2026-98840 was added to this advisory.
2026-10-26: CVE-2026-98644 was added to this advisory.
2026-10-26: CVE-2026-98772 was added to this advisory.
2026-10-26: CVE-2026-98845 was added to this advisory.
2026-10-26: CVE-2026-98856 was added to this advisory.
2026-10-26: CVE-2026-98763 was added to this advisory.
2026-10-26: CVE-2026-98729 was added to this advisory.
2026-10-26: CVE-2026-98695 was added to this advisory.
2026-10-26: CVE-2026-98716 was added to this advisory.
2026-10-26: CVE-2026-98509 was added to this advisory.
2026-10-26: CVE-2026-98531 was added to this advisory.
2026-10-26: CVE-2026-98532 was added to this advisory.
2026-10-26: CVE-2026-98552 was added to this advisory.
2026-10-26: CVE-2026-98745 was added to this advisory.
2026-10-26: CVE-2026-98590 was added to this advisory.
2026-10-26: CVE-2026-98855 was added to this advisory.
2026-10-26: CVE-2026-98839 was added to this advisory.
2026-10-26: CVE-2026-98626 was added to this advisory.
2026-10-26: CVE-2026-98807 was added to this advisory.
2026-10-26: CVE-2026-98543 was added to this advisory.
2026-10-26: CVE-2026-98717 was added to this advisory.
2026-10-26: CVE-2026-98696 was added to this advisory.
2026-10-26: CVE-2026-98537 was added to this advisory.
2026-10-26: CVE-2026-98681 was added to this advisory.
2026-10-26: CVE-2026-98467 was added to this advisory.