ALAS2023-2026-2001

References: CVE-2026-45859  CVE-2026-46324  CVE-2026-53078  CVE-2026-53359 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use list_del_rcu for netlink hooks (CVE-2026-46324)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops (CVE-2026-53078)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

Issue Correction:
Run dnf update kernel --releasever 2023.12.20260724 or dnf update --advisory ALAS2023-2026-2001 --releasever 2023.12.20260724 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    kernel-livepatch-6.1.176-221.367-1.0-0.amzn2023.aarch64
    perf-debuginfo-6.1.176-221.367.amzn2023.aarch64
    kernel-modules-extra-6.1.176-221.367.amzn2023.aarch64
    perf-6.1.176-221.367.amzn2023.aarch64
    kernel-tools-debuginfo-6.1.176-221.367.amzn2023.aarch64
    kernel-headers-6.1.176-221.367.amzn2023.aarch64
    python3-perf-6.1.176-221.367.amzn2023.aarch64
    python3-perf-debuginfo-6.1.176-221.367.amzn2023.aarch64
    kernel-6.1.176-221.367.amzn2023.aarch64
    kernel-tools-6.1.176-221.367.amzn2023.aarch64
    kernel-debuginfo-6.1.176-221.367.amzn2023.aarch64
    kernel-modules-extra-common-6.1.176-221.367.amzn2023.aarch64
    bpftool-debuginfo-6.1.176-221.367.amzn2023.aarch64
    kernel-tools-devel-6.1.176-221.367.amzn2023.aarch64
    bpftool-6.1.176-221.367.amzn2023.aarch64
    kernel-debuginfo-common-aarch64-6.1.176-221.367.amzn2023.aarch64
    kernel-devel-6.1.176-221.367.amzn2023.aarch64

src:
    kernel-6.1.176-221.367.amzn2023.src

x86_64:
    kernel-modules-extra-6.1.176-221.367.amzn2023.x86_64
    kernel-tools-debuginfo-6.1.176-221.367.amzn2023.x86_64
    python3-perf-6.1.176-221.367.amzn2023.x86_64
    bpftool-debuginfo-6.1.176-221.367.amzn2023.x86_64
    bpftool-6.1.176-221.367.amzn2023.x86_64
    kernel-modules-extra-common-6.1.176-221.367.amzn2023.x86_64
    kernel-tools-devel-6.1.176-221.367.amzn2023.x86_64
    kernel-livepatch-6.1.176-221.367-1.0-0.amzn2023.x86_64
    python3-perf-debuginfo-6.1.176-221.367.amzn2023.x86_64
    perf-6.1.176-221.367.amzn2023.x86_64
    kernel-tools-6.1.176-221.367.amzn2023.x86_64
    perf-debuginfo-6.1.176-221.367.amzn2023.x86_64
    kernel-headers-6.1.176-221.367.amzn2023.x86_64
    kernel-6.1.176-221.367.amzn2023.x86_64
    kernel-debuginfo-6.1.176-221.367.amzn2023.x86_64
    kernel-debuginfo-common-x86_64-6.1.176-221.367.amzn2023.x86_64
    kernel-devel-6.1.176-221.367.amzn2023.x86_64