# ALAS2023-2026-1646: Security update for 22 packages ALAS2023-2026-1646, released May 11, 2026, fixes 60 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1646 - Platform: Linux - Released: May 11, 2026 - Priority: Urgent (Closes CVE-2026-43067, rated Critical) - CVEs: 60, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1646.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel-livepatch-6.12.80-105.147](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.80-105.147.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.80-105.147.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-43067](https://patchblox.com/security/data/cve/CVE-2026-43067.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for block... | 9.8 | 0.0050 | | | [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 | | | [CVE-2026-31467](https://patchblox.com/security/data/cve/CVE-2026-31467.md) | High | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 | | | [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | | | [CVE-2026-31413](https://patchblox.com/security/data/cve/CVE-2026-31413.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_sc... | 7.8 | 0.0023 | | | [CVE-2026-31554](https://patchblox.com/security/data/cve/CVE-2026-31554.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... | 7.8 | 0.0021 | | | [CVE-2026-23401](https://patchblox.com/security/data/cve/CVE-2026-23401.md) | High | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE | 8.8 | 0.0019 | | | [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 | | | [CVE-2026-31525](https://patchblox.com/security/data/cve/CVE-2026-31525.md) | High | bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN | 7.8 | 0.0016 | | | [CVE-2026-31406](https://patchblox.com/security/data/cve/CVE-2026-31406.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_... | 7.8 | 0.0016 | | | [CVE-2026-31679](https://patchblox.com/security/data/cve/CVE-2026-31679.md) | High | openvswitch: validate MPLS set/set_masked payload length | 7.1 | 0.0016 | | | [CVE-2026-31449](https://patchblox.com/security/data/cve/CVE-2026-31449.md) | High | ext4: validate p_idx bounds in ext4_ext_correct_indexes | 7.8 | 0.0015 | | | [CVE-2025-68736](https://patchblox.com/security/data/cve/CVE-2025-68736.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directori... | 8.8 | 0.0014 | | | [CVE-2026-31426](https://patchblox.com/security/data/cve/CVE-2026-31426.md) | High | ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() | 7.0 | 0.0014 | | | [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 | | | [CVE-2026-23102](https://patchblox.com/security/data/cve/CVE-2026-23102.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE con... | 7.1 | 0.0014 | | | [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 | | | [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 | | | [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 | | | [CVE-2026-31678](https://patchblox.com/security/data/cve/CVE-2026-31678.md) | High | openvswitch: defer tunnel netdev_put to RCU release | 8.8 | 0.0013 | | | [CVE-2026-31453](https://patchblox.com/security/data/cve/CVE-2026-31453.md) | High | xfs: avoid dereferencing log items after push callbacks | 7.8 | 0.0013 | | | [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 | | | [CVE-2026-31527](https://patchblox.com/security/data/cve/CVE-2026-31527.md) | High | driver core: platform: use generic driver_override infrastructure | 7.8 | 0.0013 | | | [CVE-2026-31528](https://patchblox.com/security/data/cve/CVE-2026-31528.md) | High | perf: Make sure to use pmu_ctx->pmu for groups | 7.8 | 0.0013 | | | [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 | | | [CVE-2026-31515](https://patchblox.com/security/data/cve/CVE-2026-31515.md) | High | af_key: validate families in pfkey_send_migrate() | 7.0 | 0.0013 | | | [CVE-2026-31521](https://patchblox.com/security/data/cve/CVE-2026-31521.md) | High | module: Fix kernel panic when a symbol st_shndx is out of bounds | 7.0 | 0.0013 | | | [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 | | | [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 | | | [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 | | | [CVE-2026-43063](https://patchblox.com/security/data/cve/CVE-2026-43063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: don't irele after failing to iget in xfs_at... | 7.8 | 0.0013 | | | [CVE-2026-31470](https://patchblox.com/security/data/cve/CVE-2026-31470.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.1 | 0.0013 | | | [CVE-2026-31503](https://patchblox.com/security/data/cve/CVE-2026-31503.md) | High | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 | | | [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 | | | [CVE-2026-31519](https://patchblox.com/security/data/cve/CVE-2026-31519.md) | High | btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create | 7.1 | 0.0012 | | | [CVE-2026-31427](https://patchblox.com/security/data/cve/CVE-2026-31427.md) | High | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | 7.8 | 0.0012 | | | [CVE-2026-31487](https://patchblox.com/security/data/cve/CVE-2026-31487.md) | High | spi: use generic driver_override infrastructure | 7.0 | 0.0012 | | | [CVE-2026-31508](https://patchblox.com/security/data/cve/CVE-2026-31508.md) | High | net: openvswitch: Avoid releasing netdev before teardown completes | 8.8 | 0.0011 | | | [CVE-2026-31504](https://patchblox.com/security/data/cve/CVE-2026-31504.md) | High | net: fix fanout UAF in packet_release() via NETDEV_UP race | 7.8 | 0.0011 | | | [CVE-2026-31516](https://patchblox.com/security/data/cve/CVE-2026-31516.md) | High | xfrm: prevent policy_hthresh.work from racing with netns teardown | 7.8 | 0.0010 | | | [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 | | | [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 | | | [CVE-2026-23414](https://patchblox.com/security/data/cve/CVE-2026-23414.md) | Routine | tls: Purge async_hold in tls_decrypt_async_wait() | 5.5 | 0.0037 | | | [CVE-2026-23207](https://patchblox.com/security/data/cve/CVE-2026-23207.md) | Routine | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | 5.5 | 0.0014 | | | [CVE-2026-31428](https://patchblox.com/security/data/cve/CVE-2026-31428.md) | Routine | netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD | 5.5 | 0.0013 | | | [CVE-2026-31451](https://patchblox.com/security/data/cve/CVE-2026-31451.md) | Routine | ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio | 5.5 | 0.0013 | | | [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 | | | [CVE-2026-31496](https://patchblox.com/security/data/cve/CVE-2026-31496.md) | Routine | netfilter: nf_conntrack_expect: skip expectations in other netns via proc | 5.5 | 0.0013 | | | [CVE-2026-31434](https://patchblox.com/security/data/cve/CVE-2026-31434.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group sp... | 5.5 | 0.0012 | | | [CVE-2026-31524](https://patchblox.com/security/data/cve/CVE-2026-31524.md) | Routine | HID: asus: avoid memory leak in asus_report_fixup() | 5.5 | 0.0012 | | | [CVE-2026-31438](https://patchblox.com/security/data/cve/CVE-2026-31438.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for... | 5.5 | 0.0012 | | | [CVE-2026-31458](https://patchblox.com/security/data/cve/CVE-2026-31458.md) | Routine | mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] | 5.5 | 0.0012 | | | [CVE-2026-31514](https://patchblox.com/security/data/cve/CVE-2026-31514.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case... | 5.5 | 0.0012 | | | [CVE-2026-31561](https://patchblox.com/security/data/cve/CVE-2026-31561.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned... | 5.5 | 0.0012 | | | [CVE-2026-23255](https://patchblox.com/security/data/cve/CVE-2026-23255.md) | Routine | net: add proper RCU protection to /proc/net/ptype | 5.5 | 0.0012 | | | [CVE-2026-23417](https://patchblox.com/security/data/cve/CVE-2026-23417.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBE_MEM32 store... | 5.5 | 0.0012 | | | [CVE-2026-43065](https://patchblox.com/security/data/cve/CVE-2026-43065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: always drain queued discard work in ext4_m... | 5.5 | 0.0012 | | | [CVE-2026-43066](https://patchblox.com/security/data/cve/CVE-2026-43066.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_fc_replay_inode()... | 5.5 | 0.0012 | | | [CVE-2026-43068](https://patchblox.com/security/data/cve/CVE-2026-43068.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group... | 5.5 | 0.0012 | | | [CVE-2026-31480](https://patchblox.com/security/data/cve/CVE-2026-31480.md) | Routine | tracing: Fix potential deadlock in cpu hotplug with osnoise | 5.5 | 0.0010 | | --- Data as of 2026-11-10T01:44:33Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.