# ALAS2023-2026-1430: Security update for 22 packages ALAS2023-2026-1430, released February 16, 2026, fixes 76 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1430 - Platform: Linux - Released: Feb 16, 2026 - Priority: Urgent (Closes CVE-2025-68341, rated Critical) - CVEs: 76, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1430.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel-livepatch-6.12.63-84.121](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.63-84.121.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-68341](https://patchblox.com/security/data/cve/CVE-2025-68341.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP no_direct return section to fix... | 9.8 | 0.0044 | | | [CVE-2025-40212](https://patchblox.com/security/data/cve/CVE-2025-40212.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsd_set_fh_dentry()... | 9.8 | 0.0043 | | | [CVE-2025-68366](https://patchblox.com/security/data/cve/CVE-2025-68366.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... | 8.8 | 0.0020 | | | [CVE-2025-40251](https://patchblox.com/security/data/cve/CVE-2025-40251.md) | Urgent | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 | | | [CVE-2025-68349](https://patchblox.com/security/data/cve/CVE-2025-68349.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 | | | [CVE-2025-68284](https://patchblox.com/security/data/cve/CVE-2025-68284.md) | High | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 | | | [CVE-2025-68285](https://patchblox.com/security/data/cve/CVE-2025-68285.md) | High | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 | | | [CVE-2025-68261](https://patchblox.com/security/data/cve/CVE-2025-68261.md) | High | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 | | | [CVE-2025-68337](https://patchblox.com/security/data/cve/CVE-2025-68337.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 | | | [CVE-2025-68283](https://patchblox.com/security/data/cve/CVE-2025-68283.md) | High | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 | | | [CVE-2025-40257](https://patchblox.com/security/data/cve/CVE-2025-40257.md) | High | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 | | | [CVE-2025-40258](https://patchblox.com/security/data/cve/CVE-2025-40258.md) | High | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 | | | [CVE-2025-40075](https://patchblox.com/security/data/cve/CVE-2025-40075.md) | High | tcp_metrics: use dst_dev_net_rcu() | 8.1 | 0.0049 | | | [CVE-2025-40271](https://patchblox.com/security/data/cve/CVE-2025-40271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... | 7.8 | 0.0049 | | | [CVE-2025-68241](https://patchblox.com/security/data/cve/CVE-2025-68241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 | | | [CVE-2025-40273](https://patchblox.com/security/data/cve/CVE-2025-40273.md) | High | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 | | | [CVE-2025-68369](https://patchblox.com/security/data/cve/CVE-2025-68369.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: init run lock for extend inode After set... | 7.5 | 0.0046 | | | [CVE-2025-68226](https://patchblox.com/security/data/cve/CVE-2025-68226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfids_in... | 8.8 | 0.0035 | | | [CVE-2025-38678](https://patchblox.com/security/data/cve/CVE-2025-38678.md) | High | netfilter: nf_tables: reject duplicate device on updates | 7.1 | 0.0029 | | | [CVE-2025-40277](https://patchblox.com/security/data/cve/CVE-2025-40277.md) | High | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 | | | [CVE-2025-40281](https://patchblox.com/security/data/cve/CVE-2025-40281.md) | High | sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto | 7.0 | 0.0023 | | | [CVE-2025-68361](https://patchblox.com/security/data/cve/CVE-2025-68361.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-b... | n/a | 0.0023 | | | [CVE-2025-68227](https://patchblox.com/security/data/cve/CVE-2025-68227.md) | High | mptcp: Fix proto fallback detection with BPF | 7.8 | 0.0022 | | | [CVE-2025-40259](https://patchblox.com/security/data/cve/CVE-2025-40259.md) | High | scsi: sg: Do not sleep in atomic context | 7.0 | 0.0022 | | | [CVE-2025-68297](https://patchblox.com/security/data/cve/CVE-2025-68297.md) | High | ceph: fix crash in process_v2_sparse_read() for encrypted directories | 7.0 | 0.0021 | | | [CVE-2025-68371](https://patchblox.com/security/data/cve/CVE-2025-68371.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed af... | 7.0 | 0.0020 | | | [CVE-2025-68325](https://patchblox.com/security/data/cve/CVE-2025-68325.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reductio... | n/a | 0.0020 | | | [CVE-2025-68202](https://patchblox.com/security/data/cve/CVE-2025-68202.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_st... | n/a | 0.0020 | | | [CVE-2025-68210](https://patchblox.com/security/data/cve/CVE-2025-68210.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zst... | n/a | 0.0020 | | | [CVE-2025-68727](https://patchblox.com/security/data/cve/CVE-2025-68727.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname(... | n/a | 0.0019 | | | [CVE-2025-68728](https://patchblox.com/security/data/cve/CVE-2025-68728.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix uninit memory after failed mi_read in... | n/a | 0.0019 | | | [CVE-2025-40214](https://patchblox.com/security/data/cve/CVE-2025-40214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge() | 7.8 | 0.0019 | | | [CVE-2025-68756](https://patchblox.com/security/data/cve/CVE-2025-68756.md) | High | block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock | 7.1 | 0.0019 | | | [CVE-2025-68237](https://patchblox.com/security/data/cve/CVE-2025-68237.md) | High | mtdchar: fix integer overflow in read/write ioctls | 7.8 | 0.0019 | | | [CVE-2025-68231](https://patchblox.com/security/data/cve/CVE-2025-68231.md) | High | mm/mempool: fix poisoning order>0 pages with HIGHMEM | 7.1 | 0.0019 | | | [CVE-2025-40250](https://patchblox.com/security/data/cve/CVE-2025-40250.md) | High | net/mlx5: Clean up only new IRQ glue on request_irq() failure | 7.8 | 0.0017 | | | [CVE-2025-40248](https://patchblox.com/security/data/cve/CVE-2025-40248.md) | High | vsock: Ignore signal/timeout on connect() if already established | 7.8 | 0.0017 | | | [CVE-2025-68764](https://patchblox.com/security/data/cve/CVE-2025-68764.md) | High | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags | 7.8 | 0.0017 | | | [CVE-2025-40266](https://patchblox.com/security/data/cve/CVE-2025-40266.md) | High | KVM: arm64: Check the untrusted offset in FF-A memory share | 8.2 | 0.0016 | | | [CVE-2025-68265](https://patchblox.com/security/data/cve/CVE-2025-68265.md) | High | nvme: fix admin request_queue lifetime | 7.8 | 0.0016 | | | [CVE-2025-40215](https://patchblox.com/security/data/cve/CVE-2025-40215.md) | High | xfrm: delete x->tunnel as we delete x | 7.8 | 0.0015 | | | [CVE-2025-68208](https://patchblox.com/security/data/cve/CVE-2025-68208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth i... | 7.8 | 0.0015 | | | [CVE-2025-40272](https://patchblox.com/security/data/cve/CVE-2025-40272.md) | High | mm/secretmem: fix use-after-free race in fault handler | 7.8 | 0.0015 | | | [CVE-2025-68340](https://patchblox.com/security/data/cve/CVE-2025-68340.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: team: Move team device type change at the end of... | 7.0 | 0.0015 | | | [CVE-2025-40274](https://patchblox.com/security/data/cve/CVE-2025-40274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del... | 7.8 | 0.0015 | | | [CVE-2025-68746](https://patchblox.com/security/data/cve/CVE-2025-68746.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When t... | 7.8 | 0.0014 | | | [CVE-2025-68724](https://patchblox.com/security/data/cve/CVE-2025-68724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... | 8.1 | 0.0014 | | | [CVE-2025-40254](https://patchblox.com/security/data/cve/CVE-2025-40254.md) | Routine | net: openvswitch: remove never-working support for setting nsh fields | 5.5 | 0.0026 | | | [CVE-2025-68264](https://patchblox.com/security/data/cve/CVE-2025-68264.md) | Routine | ext4: refresh inline data size before write operations | 5.5 | 0.0022 | | | [CVE-2025-68378](https://patchblox.com/security/data/cve/CVE-2025-68378.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_st... | 5.5 | 0.0022 | | | [CVE-2025-68374](https://patchblox.com/security/data/cve/CVE-2025-68374.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We a... | 5.5 | 0.0021 | | | [CVE-2025-68742](https://patchblox.com/security/data/cve/CVE-2025-68742.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog->stats access when update_... | 5.8 | 0.0021 | | | [CVE-2025-68363](https://patchblox.com/security/data/cve/CVE-2025-68363.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_header is set in bpf_s... | 5.5 | 0.0021 | | | [CVE-2025-40279](https://patchblox.com/security/data/cve/CVE-2025-40279.md) | Routine | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | 6.1 | 0.0021 | | | [CVE-2025-68331](https://patchblox.com/security/data/cve/CVE-2025-68331.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas d... | 5.5 | 0.0021 | | | [CVE-2025-68292](https://patchblox.com/security/data/cve/CVE-2025-68292.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memfd: fix information leak in hugetlb folios... | 5.5 | 0.0021 | | | [CVE-2025-68200](https://patchblox.com/security/data/cve/CVE-2025-68200.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot fo... | 5.5 | 0.0021 | | | [CVE-2025-68295](https://patchblox.com/security/data/cve/CVE-2025-68295.md) | Routine | smb: client: fix memory leak in cifs_construct_tcon() | 5.5 | 0.0021 | | | [CVE-2025-68740](https://patchblox.com/security/data/cve/CVE-2025-68740.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by ima_filter_ru... | 5.5 | 0.0021 | | | [CVE-2025-68293](https://patchblox.com/security/data/cve/CVE-2025-68293.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when... | 5.5 | 0.0021 | | | [CVE-2025-68288](https://patchblox.com/security/data/cve/CVE-2025-68288.md) | Routine | usb: storage: Fix memory leak in USB bulk transport | 5.5 | 0.0021 | | | [CVE-2025-68296](https://patchblox.com/security/data/cve/CVE-2025-68296.md) | Routine | drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup | 5.5 | 0.0021 | | | [CVE-2025-68229](https://patchblox.com/security/data/cve/CVE-2025-68229.md) | Routine | scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() | 5.5 | 0.0020 | | | [CVE-2025-68348](https://patchblox.com/security/data/cve/CVE-2025-68348.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pa... | 5.5 | 0.0020 | | | [CVE-2025-40268](https://patchblox.com/security/data/cve/CVE-2025-40268.md) | Routine | cifs: client: fix memory leak in smb3_fs_context_parse_param | 5.5 | 0.0020 | | | [CVE-2025-68219](https://patchblox.com/security/data/cve/CVE-2025-68219.md) | Routine | cifs: fix memory leak in smb3_fs_context_parse_param error path | 5.9 | 0.0020 | | | [CVE-2025-40287](https://patchblox.com/security/data/cve/CVE-2025-40287.md) | Routine | exfat: fix improper check of dentry.stream.valid_size | 5.5 | 0.0020 | | | [CVE-2025-68198](https://patchblox.com/security/data/cve/CVE-2025-68198.md) | Routine | crash: fix crashkernel resource shrink | 5.5 | 0.0020 | | | [CVE-2025-68372](https://patchblox.com/security/data/cve/CVE-2025-68372.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one... | 5.5 | 0.0020 | | | [CVE-2025-68199](https://patchblox.com/security/data/cve/CVE-2025-68199.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in... | 5.8 | 0.0020 | | | [CVE-2025-68259](https://patchblox.com/security/data/cve/CVE-2025-68259.md) | Routine | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | 6.2 | 0.0019 | | | [CVE-2025-68244](https://patchblox.com/security/data/cve/CVE-2025-68244.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to G... | 4.7 | 0.0019 | | | [CVE-2025-68744](https://patchblox.com/security/data/cve/CVE-2025-68744.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]perc... | 5.5 | 0.0019 | | | [CVE-2025-68329](https://patchblox.com/security/data/cve/CVE-2025-68329.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARN_ON in tracing_buffers_mmap_clo... | 5.5 | 0.0018 | | | [CVE-2025-68242](https://patchblox.com/security/data/cve/CVE-2025-68242.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are d... | 4.5 | 0.0018 | | | [CVE-2025-68214](https://patchblox.com/security/data/cve/CVE-2025-68214.md) | Routine | timers: Fix NULL function pointer race in timer_shutdown_sync() | 5.5 | 0.0013 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.