ALAS2023-2026-1594: Security update for 22 packages

ALAS2023-2026-1594, released April 27, 2026, fixes 97 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

5 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0159

75th percentile

Priority of the 97 CVEs

Patch now 0
                                Urgent 5
                                High 40
                                Routine 52

Fixed package versions

Product	Release	Fixed in
bpftool6.12	amzn 2023	1:6.12.79-101.147.amzn2023
bpftool6.12-debuginfo	amzn 2023	1:6.12.79-101.147.amzn2023
kernel-livepatch-6.12.79-101.147	amzn 2023	1:1.0-0.amzn2023
kernel6.12	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-debuginfo	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-debuginfo-common-aarch64	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-debuginfo-common-x86_64	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-devel	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-headers	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-libbpf	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-libbpf-debuginfo	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-libbpf-devel	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-libbpf-static	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-modules-extra	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-modules-extra-common	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-tools	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-tools-debuginfo	amzn 2023	1:6.12.79-101.147.amzn2023
kernel6.12-tools-devel	amzn 2023	1:6.12.79-101.147.amzn2023
perf6.12	amzn 2023	1:6.12.79-101.147.amzn2023
perf6.12-debuginfo	amzn 2023	1:6.12.79-101.147.amzn2023
python3-perf6.12	amzn 2023	1:6.12.79-101.147.amzn2023
python3-perf6.12-debuginfo	amzn 2023	1:6.12.79-101.147.amzn2023

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-31402	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	9.8	0.0122	None reported
Urgent	CVE-2026-43407	linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in c...	9.1	0.0066	None reported
Urgent	CVE-2026-43406	linux: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads i...	9.1	0.0061	None reported
Urgent	CVE-2026-43383	linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t...	9.4	0.0054	None reported
Urgent	CVE-2026-43384	linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-ti...	9.8	0.0046	None reported
High	CVE-2026-23455	kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng...	9.1	0.0159	None reported
High	CVE-2025-40135	ipv6: use RCU in ip6_xmit()	8.4	0.0071	None reported
High	CVE-2026-43405	linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in ceph...	7.5	0.0060	None reported
High	CVE-2026-43441	linux: In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when I...	7.5	0.0059	None reported
High	CVE-2026-23456	linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in de...	8.2	0.0054	None reported
High	CVE-2026-43452	linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers agains...	8.2	0.0054	None reported
High	CVE-2026-43365	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	8.2	0.0051	None reported
High	CVE-2026-23457	linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length...	8.6	0.0045	None reported
High	CVE-2026-43466	linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ r...	8.2	0.0041	None reported
High	CVE-2026-43362	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	8.1	0.0026	None reported
High	CVE-2026-23278	netfilter: nf_tables: always walk all pending catchall elements	7.8	0.0023	None reported
High	CVE-2026-31788	linux: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU...	8.2	0.0019	None reported
High	CVE-2026-43456	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we...	7.8	0.0019	None reported
High	CVE-2026-23274	netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels	7.8	0.0018	None reported
High	CVE-2026-23392	netfilter: nf_tables: release flowtable after rcu grace period on error	8.8	0.0017	None reported
High	CVE-2026-43368	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter...	8.8	0.0016	None reported
High	CVE-2026-43408	kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0016	None reported
High	CVE-2026-23413	linux: In the Linux kernel, the following vulnerability has been resolved: clsact: Fix use-after-free in init/destroy rollb...	7.8	0.0016	None reported
High	CVE-2026-43374	linux: In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remov...	7.8	0.0016	None reported
High	CVE-2026-45943	erofs: fix inline data read failure for ztailpacking pclusters	7.1	0.0016	None reported

Also fixes CVE-2026-31402

RXSA-2026:13577
kernel on rocky 8
RHSA-2026:13577
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2026:13578
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ALSA-2026:13577
bpftool, kernel, kernel-abi-stablelists and 22 more on almalinux 8
ALSA-2026:13578
kernel-rt, kernel-rt-core, kernel-rt-debug and 7 more on almalinux 8
RLSA-2026:13578
kernel-rt on rocky 8
ELSA-2026-13577
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ELSA-2026-13565
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9

Vendor advisory

https://alas.aws.amazon.com/AL2023/ALAS-2026-1594.html

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/alas2023-2026-1594">ALAS2023-2026-1594 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.