Linux · Amazon Linux · Security advisory · March 30, 2026

ALAS2023-2026-1514: Security update for 22 packages

ALAS2023-2026-1514, released March 30, 2026, fixes 82 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
82
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0075
55th percentile

Priority of the 82 CVEs

Patch now 0 Urgent 3 High 30 Routine 49

Fixed package versions

ProductReleaseFixed in
bpftool6.18amzn 20231:6.18.15-14.217.amzn2023
bpftool6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel-livepatch-6.18.15-14.217amzn 20231:1.0-0.amzn2023
kernel6.18amzn 20231:6.18.15-14.217.amzn2023
kernel6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-debuginfo-common-aarch64amzn 20231:6.18.15-14.217.amzn2023
kernel6.18-debuginfo-common-x86_64amzn 20231:6.18.15-14.217.amzn2023
kernel6.18-develamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-headersamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpfamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpf-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpf-develamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpf-staticamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-modules-extraamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-modules-extra-commonamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-toolsamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-tools-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-tools-develamzn 20231:6.18.15-14.217.amzn2023
perf6.18amzn 20231:6.18.15-14.217.amzn2023
perf6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023
python3-perf6.18amzn 20231:6.18.15-14.217.amzn2023
python3-perf6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-45898 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by remo...9.8 0.0053 None reported
Urgent CVE-2026-46266 linux: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop in...9.1 0.0047 None reported
Urgent CVE-2026-45899 ext4: drop extent cache when splitting extent fails9.8 0.0016 None reported
High CVE-2026-45860 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection...7.5 0.0075 None reported
High CVE-2026-45859 netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation8.1 0.0071 None reported
High CVE-2026-31539 kernel: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_i...8.8 0.0033 None reported
High CVE-2026-45933 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve id of register in sync_linked_regs...7.8 0.0020 None reported
High CVE-2026-45856 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i...8.8 0.0019 None reported
High CVE-2026-23243 RDMA/umad: Reject negative data_len in ib_umad_write7.8 0.0018 None reported
High CVE-2026-46253 linux: In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ra...7.8 0.0017 None reported
High CVE-2026-45932 bpf: Fix tcx/netkit detach permissions when prog fd isn't given7.3 0.0017 None reported
High CVE-2026-45851 linux: In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted memory table...7.1 0.0016 None reported
High CVE-2026-45886 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only...7.0 0.0016 None reported
High CVE-2026-45943 erofs: fix inline data read failure for ztailpacking pclusters7.1 0.0016 None reported
High CVE-2026-45903 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototype...7.1 0.0016 None reported
High CVE-2026-45935 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteI...7.8 0.0015 None reported
High CVE-2026-45920 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs s...7.8 0.0015 None reported
High CVE-2026-23390 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow7.8 0.0014 None reported
High CVE-2026-46251 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruptio...8.4 0.0013 None reported
High CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry8.8 0.0013 None reported
High CVE-2026-45862 linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before u...7.8 0.0013 None reported
High CVE-2026-45942 ext4: fix e4b bitmap inconsistency reports8.8 0.0013 None reported
High CVE-2026-45970 kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0013 None reported
High CVE-2026-45957 linux: In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to softi...7.1 0.0013 None reported
High CVE-2026-45951 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free of BTF objec...7.8 0.0012 None reported
Showing 1 to 25 of 82 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.