ALAS2027-2026-242


Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-242
Advisory Release Date: 2026-10-21 09:00 Pacific
Advisory Updated Date: 2026-10-21 15:07 Pacific
Severity: Important

Issue Overview:

Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-18917:
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.


Affected Packages:

libvirt


Issue Correction:
Run dnf update libvirt or dnf update --advisory ALAS2027-2026-242 to update your system.

New Packages:
aarch64:
    libvirt-devel-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-core-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-disk-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-client-qemu-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-plugin-lockd-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-network-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-qemu-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-nwfilter-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-ssh-proxy-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-log-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-libs-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-interface-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-secret-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-libs-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-lock-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-qemu-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-nss-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-client-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-nss-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-proxy-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-plugin-lockd-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-core-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-ssh-proxy-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-log-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-debugsource-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-secret-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-common-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-config-nwfilter-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-config-network-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-docs-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-logical-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-nodedev-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-nodedev-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-kvm-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-common-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-client-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-disk-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-storage-logical-debuginfo-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-lock-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-nwfilter-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-network-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-proxy-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-interface-12.0.0-3.amzn2027.0.4.aarch64
    libvirt-daemon-driver-qemu-12.0.0-3.amzn2027.0.4.aarch64

src:
    libvirt-12.0.0-3.amzn2027.0.4.src

x86_64:
    libvirt-daemon-driver-secret-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-config-nwfilter-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-docs-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-lock-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-ssh-proxy-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-kvm-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-libs-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-nss-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-debugsource-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-common-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-core-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-interface-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-ssh-proxy-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-disk-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-config-network-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-client-qemu-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-nss-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-log-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-lock-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-logical-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-proxy-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-libs-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-plugin-lockd-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-nodedev-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-nodedev-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-nwfilter-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-client-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-common-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-disk-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-qemu-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-network-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-qemu-debuginfo-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-plugin-lockd-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-qemu-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-devel-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-logical-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-log-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-network-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-storage-core-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-nwfilter-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-secret-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-client-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-driver-interface-12.0.0-3.amzn2027.0.4.x86_64
    libvirt-daemon-proxy-12.0.0-3.amzn2027.0.4.x86_64