Amazon Linux 2023 Security Advisory: ALAS2023-2026-3251
Advisory Released Date: 2026-10-24
Advisory Updated Date: 2026-10-26
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF in sock clone early bailouts (CVE-2026-68399)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: initialize inode mapping flags for cached inodes (CVE-2026-80734)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark NULL kptr stores precise (CVE-2026-98034)
In the Linux kernel, the following vulnerability has been resolved:
bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks (CVE-2026-98084)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)
In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: preserve mremap address delta when skipping page tables (CVE-2026-98373)
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (CVE-2026-98374)
In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: drop RX packets with a short Ethernet header (CVE-2026-98375)
In the Linux kernel, the following vulnerability has been resolved:
vlan: require the MAC header to be present in __vlan_insert_inner_tag() (CVE-2026-98377)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip unsettled links in link iterator (CVE-2026-98378)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_rpfilter: reject routes without inet6_dev (CVE-2026-98379)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: reject IDR error pointers when deleting actions (CVE-2026-98380)
In the Linux kernel, the following vulnerability has been resolved:
veth: manage XDP program pointers during channel resize (CVE-2026-98381)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject dev-bound-only programs on other devices (CVE-2026-98382)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL (CVE-2026-98383)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() (CVE-2026-98384)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)
Affected Packages:
kernel6.18
Issue Correction:
Run dnf update kernel6.18 --releasever 2023.12.20261026 or dnf update --advisory ALAS2023-2026-3251 --releasever 2023.12.20261026 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
aarch64:
kernel6.18-modules-extra-common-6.18.56-125.164.amzn2023.aarch64
perf6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-tools-devel-6.18.56-125.164.amzn2023.aarch64
python3-perf6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-tools-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-headers-6.18.56-125.164.amzn2023.aarch64
python3-perf6.18-6.18.56-125.164.amzn2023.aarch64
kernel-livepatch-6.18.56-125.164-1.0-0.amzn2023.aarch64
microvm-kernel6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-tools-6.18.56-125.164.amzn2023.aarch64
bpftool6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
bpftool6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-modules-extra-6.18.56-125.164.amzn2023.aarch64
perf6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-6.18.56-125.164.amzn2023.aarch64
kernel6.18-debuginfo-6.18.56-125.164.amzn2023.aarch64
kernel6.18-debuginfo-common-aarch64-6.18.56-125.164.amzn2023.aarch64
kernel6.18-devel-6.18.56-125.164.amzn2023.aarch64
src:
kernel6.18-6.18.56-125.164.amzn2023.src
x86_64:
microvm-kernel6.18-6.18.56-125.164.amzn2023.x86_64
python3-perf6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
kernel6.18-modules-extra-6.18.56-125.164.amzn2023.x86_64
kernel-livepatch-6.18.56-125.164-1.0-0.amzn2023.x86_64
bpftool6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
perf6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
bpftool6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-tools-debuginfo-6.18.56-125.164.amzn2023.x86_64
kernel6.18-tools-devel-6.18.56-125.164.amzn2023.x86_64
kernel6.18-modules-extra-common-6.18.56-125.164.amzn2023.x86_64
python3-perf6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-tools-6.18.56-125.164.amzn2023.x86_64
perf6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-debuginfo-6.18.56-125.164.amzn2023.x86_64
kernel6.18-headers-6.18.56-125.164.amzn2023.x86_64
kernel6.18-6.18.56-125.164.amzn2023.x86_64
kernel6.18-debuginfo-common-x86_64-6.18.56-125.164.amzn2023.x86_64
kernel6.18-devel-6.18.56-125.164.amzn2023.x86_64