Linux · Amazon Linux · Security advisory · March 16, 2026

ALAS2023-2026-1495: Security update for 22 packages

ALAS2023-2026-1495, released March 16, 2026, fixes 50 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
50
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0064
51st percentile

Priority of the 50 CVEs

Patch now 0 Urgent 2 High 31 Routine 17

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.58-82.121.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.58-82.121.amzn2023
kernel-livepatch-6.12.58-82.121amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.58-82.121.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.58-82.121.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.58-82.121.amzn2023
kernel6.12-develamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-headersamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-libbpfamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-libbpf-debuginfoamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-libbpf-develamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-libbpf-staticamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-toolsamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.58-82.121.amzn2023
kernel6.12-tools-develamzn 20231:6.12.58-82.121.amzn2023
perf6.12amzn 20231:6.12.58-82.121.amzn2023
perf6.12-debuginfoamzn 20231:6.12.58-82.121.amzn2023
python3-perf6.12amzn 20231:6.12.58-82.121.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.58-82.121.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-40350 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea...9.8 0.0055 None reported
Urgent CVE-2025-40320 linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer...9.8 0.0045 None reported
High CVE-2025-40240 sctp: avoid NULL dereference when chunk data buffer is missing8.6 0.0064 None reported
High CVE-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid()8.8 0.0049 None reported
High CVE-2025-40324 NFSD: Fix crash in nfsd4_read_release()7.5 0.0049 None reported
High CVE-2025-68321 linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allo...7.5 0.0045 None reported
High CVE-2025-40329 drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb7.0 0.0024 None reported
High CVE-2025-68188 tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()7.8 0.0022 None reported
High CVE-2025-68311 tty: serial: ip22zilog: Use platform device for probing7.8 0.0022 None reported
High CVE-2025-40237 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system7.1 0.0022 None reported
High CVE-2025-40293 iommufd: Don't overflow during division for dirty tracking7.0 0.0022 None reported
High CVE-2025-68177 linux: In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul...n/a 0.0021 None reported
High CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()7.8 0.0021 None reported
High CVE-2025-40331 sctp: Prevent TOCTOU out-of-bounds write7.8 0.0020 None reported
High CVE-2025-40348 kernel-uek: [6.12.0-107.59.3.2] - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) {CVE-2025-40215} [6.12.0-107.59.3.1]...7.0 0.0020 None reported
High CVE-2025-40357 linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_d...n/a 0.0020 None reported
High CVE-2025-68186 linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_...n/a 0.0020 None reported
High CVE-2025-40292 virtio-net: fix received length check in big packets8.4 0.0018 None reported
High CVE-2025-40297 net: bridge: fix use-after-free due to MST port state bypass7.8 0.0017 None reported
High CVE-2025-40362 ceph: fix multifs mds auth caps issue8.8 0.0016 None reported
High CVE-2025-40307 exfat: validate cluster allocation bits of the allocation bitmap7.8 0.0016 None reported
High CVE-2025-40304 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds7.8 0.0015 None reported
High CVE-2025-40317 regmap: slimbus: fix bus_context pointer in regmap init calls7.8 0.0015 None reported
High CVE-2025-40319 bpf: Sync pending IRQ work before freeing ring buffer7.8 0.0015 None reported
High CVE-2025-68171 linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se...7.8 0.0015 None reported
Showing 1 to 25 of 50 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.