# ALAS2023-2026-1693: Security update for 18 packages ALAS2023-2026-1693, released May 8, 2026, fixes 78 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1693 - Platform: Linux - Released: May 8, 2026 - Priority: Urgent (Closes CVE-2026-43071, rated Critical) - CVEs: 78, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1693.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel-livepatch-6.18.25-55.108](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.25-55.108.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-43071](https://patchblox.com/security/data/cve/CVE-2026-43071.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to tw... | 9.1 | 0.0046 | | | [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 | | | [CVE-2026-31533](https://patchblox.com/security/data/cve/CVE-2026-31533.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path... | 9.8 | 0.0040 | | | [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | | | [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | | | [CVE-2026-31637](https://patchblox.com/security/data/cve/CVE-2026-31637.md) | High | rxrpc: reject undecryptable rxkad response tickets | 9.8 | 0.0059 | | | [CVE-2026-43101](https://patchblox.com/security/data/cve/CVE-2026-43101.md) | High | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | 7.5 | 0.0059 | | | [CVE-2026-43099](https://patchblox.com/security/data/cve/CVE-2026-43099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_pro... | 7.5 | 0.0050 | | | [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | | | [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0048 | | | [CVE-2026-31669](https://patchblox.com/security/data/cve/CVE-2026-31669.md) | High | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 | | | [CVE-2026-31668](https://patchblox.com/security/data/cve/CVE-2026-31668.md) | High | seg6: separate dst_cache for input and output paths in seg6 lwtunnel | 9.8 | 0.0044 | | | [CVE-2026-31662](https://patchblox.com/security/data/cve/CVE-2026-31662.md) | High | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 | | | [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 | | | [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 9.4 | 0.0037 | | | [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 8.8 | 0.0035 | | | [CVE-2026-31708](https://patchblox.com/security/data/cve/CVE-2026-31708.md) | High | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | 8.1 | 0.0035 | | | [CVE-2026-43350](https://patchblox.com/security/data/cve/CVE-2026-43350.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: require a full NFS mode SID before... | 7.6 | 0.0032 | | | [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 | | | [CVE-2026-31600](https://patchblox.com/security/data/cve/CVE-2026-31600.md) | High | arm64: mm: Handle invalid large leaf mappings correctly | 7.5 | 0.0029 | | | [CVE-2026-31694](https://patchblox.com/security/data/cve/CVE-2026-31694.md) | High | fuse: reject oversized dirents in page cache | 7.8 | 0.0028 | | | [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | | | [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 | | | [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 | | | [CVE-2026-31719](https://patchblox.com/security/data/cve/CVE-2026-31719.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: krb5enc - fix async decrypt skipping has... | 7.5 | 0.0018 | | | [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 | | | [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account... | 7.8 | 0.0014 | | | [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 | | | [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 | | | [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 | | | [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 | | | [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns e... | 7.8 | 0.0013 | | | [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 | | | [CVE-2026-31716](https://patchblox.com/security/data/cve/CVE-2026-31716.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec->used in journal-replay f... | 7.8 | 0.0013 | | | [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.1 | 0.0013 | | | [CVE-2026-43084](https://patchblox.com/security/data/cve/CVE-2026-43084.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: make hash table per... | 7.8 | 0.0013 | | | [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 | | | [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 | | | [CVE-2026-31591](https://patchblox.com/security/data/cve/CVE-2026-31591.md) | High | KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish | 7.0 | 0.0012 | | | [CVE-2026-31418](https://patchblox.com/security/data/cve/CVE-2026-31418.md) | High | netfilter: ipset: drop logically empty buckets in mtype_del | 8.1 | 0.0012 | | | [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 | | | [CVE-2026-31666](https://patchblox.com/security/data/cve/CVE-2026-31666.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing... | 7.8 | 0.0012 | | | [CVE-2026-31692](https://patchblox.com/security/data/cve/CVE-2026-31692.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check... | 7.8 | 0.0012 | | | [CVE-2026-31703](https://patchblox.com/security/data/cve/CVE-2026-31703.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in inode_switch_wb... | 7.8 | 0.0012 | | | [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 | | | [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 | | | [CVE-2026-31700](https://patchblox.com/security/data/cve/CVE-2026-31700.md) | High | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | 7.8 | 0.0011 | | | [CVE-2026-43116](https://patchblox.com/security/data/cve/CVE-2026-43116.md) | High | netfilter: ctnetlink: ensure safe access to master conntrack | 8.8 | 0.0010 | | | [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 | | | [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 | | | [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 | | | [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 | | | [CVE-2026-31531](https://patchblox.com/security/data/cve/CVE-2026-31531.md) | Routine | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() | 5.5 | 0.0017 | | | [CVE-2026-43073](https://patchblox.com/security/data/cve/CVE-2026-43073.md) | Routine | x86-64: rename misleadingly named '__copy_user_nocache()' function | 5.5 | 0.0016 | | | [CVE-2026-31592](https://patchblox.com/security/data/cve/CVE-2026-31592.md) | Routine | KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock | 6.6 | 0.0016 | | | [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 | | | [CVE-2026-43118](https://patchblox.com/security/data/cve/CVE-2026-43118.md) | Routine | btrfs: fix zero size inode with non-zero size after log replay | 5.5 | 0.0016 | | | [CVE-2026-31579](https://patchblox.com/security/data/cve/CVE-2026-31579.md) | Routine | wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit | 5.5 | 0.0016 | | | [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() str... | 5.5 | 0.0013 | | | [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 | | | [CVE-2026-31628](https://patchblox.com/security/data/cve/CVE-2026-31628.md) | Routine | x86/CPU: Fix FPDSS on Zen1 | 5.5 | 0.0013 | | | [CVE-2026-31634](https://patchblox.com/security/data/cve/CVE-2026-31634.md) | Routine | rxrpc: fix reference count leak in rxrpc_server_keyring() | 5.5 | 0.0013 | | | [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in... | 5.5 | 0.0013 | | | [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 | | | [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Skip discovery table for... | 5.5 | 0.0012 | | | [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hy... | 5.5 | 0.0012 | | | [CVE-2026-31575](https://patchblox.com/security/data/cve/CVE-2026-31575.md) | Routine | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 5.5 | 0.0012 | | | [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error... | 5.5 | 0.0012 | | | [CVE-2026-43090](https://patchblox.com/security/data/cve/CVE-2026-43090.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in xfrm_migrate_policy_f... | 5.5 | 0.0012 | | | [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on b... | 5.5 | 0.0012 | | | [CVE-2026-43100](https://patchblox.com/security/data/cve/CVE-2026-43100.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: guard local VLAN-0 FDB helpers against N... | 5.5 | 0.0012 | | | [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 | | | [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 | | | [CVE-2026-31689](https://patchblox.com/security/data/cve/CVE-2026-31689.md) | Routine | EDAC/mc: Fix error path ordering in edac_mc_alloc() | 5.5 | 0.0012 | | | [CVE-2026-31713](https://patchblox.com/security/data/cve/CVE-2026-31713.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: abort on fatal signal during sync init Wh... | 5.5 | 0.0012 | | | [CVE-2026-31653](https://patchblox.com/security/data/cve/CVE-2026-31653.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc repeat_call_control if d... | 5.5 | 0.0011 | | | [CVE-2026-31691](https://patchblox.com/security/data/cve/CVE-2026-31691.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: igb: remove napi_synchronize() in igb_down() Wh... | 5.5 | 0.0011 | | | [CVE-2026-23394](https://patchblox.com/security/data/cve/CVE-2026-23394.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened | 4.7 | 0.0010 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.