Linux · 
Amazon Linux · Security advisory · February 5, 2026
Amazon Linux · Security advisory · February 5, 2026ALAS2023-2026-1423: Security update for 22 packages
ALAS2023-2026-1423, released February 5, 2026, fixes 56 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
56
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 56 CVEs
Patch now 0
Urgent 5
High 25
Routine 26
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool6.12 | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| bpftool6.12-debuginfo | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel-livepatch-6.12.64-87.122 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel6.12 | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-debuginfo | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-debuginfo-common-aarch64 | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-debuginfo-common-x86_64 | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-devel | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-headers | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-libbpf | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-libbpf-debuginfo | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-libbpf-devel | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-libbpf-static | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-modules-extra | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-modules-extra-common | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-tools | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-tools-debuginfo | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| kernel6.12-tools-devel | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| perf6.12 | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| perf6.12-debuginfo | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| python3-perf6.12 | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
| python3-perf6.12-debuginfo | amzn 2023 | 1:6.12.64-87.122.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-68206 | netfilter: nft_ct: add seqadj extension for natted connections | 9.1 | 0.0071 | None reported |
| Urgent | CVE-2025-71072 | shmem: fix recovery on rename failures | 9.8 | 0.0036 | None reported |
| Urgent | CVE-2025-68814 | io_uring: fix filename leak in __io_openat_prep() | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2025-68822 | Input: alps - fix use-after-free bugs caused by dev3_register_work | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2025-71098 | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 | None reported |
| High | CVE-2025-68782 | scsi: target: Reset t_task_cdb pointer in error case | 8.6 | 0.0069 | None reported |
| High | CVE-2025-68794 | iomap: adjust read range correctly for non-block-aligned positions | 9.8 | 0.0069 | None reported |
| High | CVE-2025-68775 | net/handshake: duplicate handshake cancellations leak socket | 9.8 | 0.0055 | None reported |
| High | CVE-2025-71120 | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 | None reported |
| High | CVE-2025-71116 | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 | None reported |
| High | CVE-2025-68803 | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 | None reported |
| High | CVE-2025-71085 | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0031 | None reported |
| High | CVE-2025-71093 | e1000: fix OOB in e1000_tbi_should_accept() | 7.1 | 0.0029 | None reported |
| High | CVE-2025-71132 | smc91x: fix broken irq-context in PREEMPT_RT | 8.8 | 0.0022 | None reported |
| High | CVE-2025-71122 | iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED | 7.8 | 0.0022 | None reported |
| High | CVE-2025-71067 | ntfs: set dummy blocksize to read boot_block when mounting | 7.1 | 0.0020 | None reported |
| High | CVE-2025-40170 | net: use dst_dev_rcu() in sk_setup_caps() | 8.1 | 0.0019 | None reported |
| High | CVE-2025-68795 | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on s... | 7.8 | 0.0017 | None reported |
| High | CVE-2025-71123 | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount... | 7.8 | 0.0017 | None reported |
| High | CVE-2025-71089 | iommu: disable SVA when CONFIG_X86 is set | 7.8 | 0.0016 | None reported |
| High | CVE-2025-68785 | net: openvswitch: fix middle attribute validation in push_nsh() action | 7.1 | 0.0016 | None reported |
| High | CVE-2025-71075 | scsi: aic94xx: fix use-after-free in device removal path | 7.8 | 0.0015 | None reported |
| High | CVE-2025-71130 | drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer | 7.1 | 0.0015 | None reported |
| High | CVE-2025-71113 | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated... | 7.8 | 0.0015 | None reported |
| High | CVE-2025-68810 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an... | 7.8 | 0.0015 | None reported |
Showing 1 to 25 of 56
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.