ALAS2023-2026-3455

Amazon Linux 2023 Security Advisory: ALAS2023-2026-3455
Advisory Released Date: 2026-11-12
Advisory Updated Date: 2026-11-12
Severity: Important
Issue Overview:

In the Linux kernel, the following vulnerability has been resolved:

bonding: fix type confusion in bond_setup_by_slave() (CVE-2026-43456)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: make sure gc is properly stopped (CVE-2026-72434)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (CVE-2026-89912)

In the Linux kernel, the following vulnerability has been resolved:

nvme: remove stale namespaces by NSID range during scan (CVE-2026-98056)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (CVE-2026-98863)

In the Linux kernel, the following vulnerability has been resolved:

namespace: don't inherit MNT_UMOUNT in clone_mnt() (CVE-2026-98993)


Affected Packages:

kernel


Issue Correction:
Run dnf update kernel --releasever 2023.12.20261112 or dnf update --advisory ALAS2023-2026-3455 --releasever 2023.12.20261112 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    python3-perf-6.1.190-237.442.amzn2023.aarch64
    bpftool-6.1.190-237.442.amzn2023.aarch64
    kernel-tools-6.1.190-237.442.amzn2023.aarch64
    perf-debuginfo-6.1.190-237.442.amzn2023.aarch64
    kernel-tools-devel-6.1.190-237.442.amzn2023.aarch64
    kernel-livepatch-6.1.190-237.442-1.0-0.amzn2023.aarch64
    kernel-tools-debuginfo-6.1.190-237.442.amzn2023.aarch64
    python3-perf-debuginfo-6.1.190-237.442.amzn2023.aarch64
    kernel-modules-extra-common-6.1.190-237.442.amzn2023.aarch64
    bpftool-debuginfo-6.1.190-237.442.amzn2023.aarch64
    kernel-6.1.190-237.442.amzn2023.aarch64
    kernel-headers-6.1.190-237.442.amzn2023.aarch64
    microvm-kernel-6.1.190-237.442.amzn2023.aarch64
    perf-6.1.190-237.442.amzn2023.aarch64
    kernel-modules-extra-6.1.190-237.442.amzn2023.aarch64
    kernel-debuginfo-6.1.190-237.442.amzn2023.aarch64
    kernel-debuginfo-common-aarch64-6.1.190-237.442.amzn2023.aarch64
    kernel-devel-6.1.190-237.442.amzn2023.aarch64

src:
    kernel-6.1.190-237.442.amzn2023.src

x86_64:
    kernel-debuginfo-6.1.190-237.442.amzn2023.x86_64
    perf-debuginfo-6.1.190-237.442.amzn2023.x86_64
    python3-perf-6.1.190-237.442.amzn2023.x86_64
    bpftool-debuginfo-6.1.190-237.442.amzn2023.x86_64
    kernel-tools-debuginfo-6.1.190-237.442.amzn2023.x86_64
    microvm-kernel-6.1.190-237.442.amzn2023.x86_64
    kernel-headers-6.1.190-237.442.amzn2023.x86_64
    python3-perf-debuginfo-6.1.190-237.442.amzn2023.x86_64
    bpftool-6.1.190-237.442.amzn2023.x86_64
    kernel-modules-extra-common-6.1.190-237.442.amzn2023.x86_64
    kernel-tools-devel-6.1.190-237.442.amzn2023.x86_64
    kernel-livepatch-6.1.190-237.442-1.0-0.amzn2023.x86_64
    kernel-tools-6.1.190-237.442.amzn2023.x86_64
    kernel-modules-extra-6.1.190-237.442.amzn2023.x86_64
    perf-6.1.190-237.442.amzn2023.x86_64
    kernel-6.1.190-237.442.amzn2023.x86_64
    kernel-debuginfo-common-x86_64-6.1.190-237.442.amzn2023.x86_64
    kernel-devel-6.1.190-237.442.amzn2023.x86_64

Additional References

Release Notes:  Amazon Linux 2023 Release Notes

Red Hat: CVE-2026-43456, CVE-2026-72434, CVE-2026-89912, CVE-2026-98056, CVE-2026-98863, CVE-2026-98993

Mitre: CVE-2026-43456, CVE-2026-72434, CVE-2026-89912, CVE-2026-98056, CVE-2026-98863, CVE-2026-98993