Linux · Amazon Linux · Security advisory · May 11, 2026

ALAS2023-2026-1646: Security update for 22 packages

ALAS2023-2026-1646, released May 11, 2026, fixes 60 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
60
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0050
43rd percentile

Priority of the 60 CVEs

Patch now 0 Urgent 1 High 41 Routine 18

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.80-105.147.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.80-105.147.amzn2023
kernel-livepatch-6.12.80-105.147amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.80-105.147.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.80-105.147.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.80-105.147.amzn2023
kernel6.12-develamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-headersamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-libbpfamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-libbpf-debuginfoamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-libbpf-develamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-libbpf-staticamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-toolsamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.80-105.147.amzn2023
kernel6.12-tools-develamzn 20231:6.12.80-105.147.amzn2023
perf6.12amzn 20231:6.12.80-105.147.amzn2023
perf6.12-debuginfoamzn 20231:6.12.80-105.147.amzn2023
python3-perf6.12amzn 20231:6.12.80-105.147.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.80-105.147.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-43067 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for block...9.8 0.0050 None reported
High CVE-2026-31448 ext4: avoid infinite loops caused by residual data9.4 0.0050 None reported
High CVE-2026-31467 erofs: add GFP_NOIO in the bio completion if needed8.8 0.0038 None reported
High CVE-2026-31570 can: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 0.0026 None reported
High CVE-2026-31413 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_sc...7.8 0.0023 None reported
High CVE-2026-31554 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...7.8 0.0021 None reported
High CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE8.8 0.0019 None reported
High CVE-2026-31674 netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()7.1 0.0017 None reported
High CVE-2026-31525 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN7.8 0.0016 None reported
High CVE-2026-31406 linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_...7.8 0.0016 None reported
High CVE-2026-31679 openvswitch: validate MPLS set/set_masked payload length7.1 0.0016 None reported
High CVE-2026-31449 ext4: validate p_idx bounds in ext4_ext_correct_indexes7.8 0.0015 None reported
High CVE-2025-68736 linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directori...8.8 0.0014 None reported
High CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()7.0 0.0014 None reported
High CVE-2026-31447 ext4: reject mount if bigalloc with s_first_data_block != 07.8 0.0014 None reported
High CVE-2026-23102 linux: In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE con...7.1 0.0014 None reported
High CVE-2026-31446 ext4: fix use-after-free in update_super_work when racing with umount7.8 0.0014 None reported
High CVE-2026-31452 ext4: convert inline data to extents when truncate exceeds inline size7.8 0.0014 None reported
High CVE-2026-31469 virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false7.8 0.0014 None reported
High CVE-2026-31678 openvswitch: defer tunnel netdev_put to RCU release8.8 0.0013 None reported
High CVE-2026-31453 xfs: avoid dereferencing log items after push callbacks7.8 0.0013 None reported
High CVE-2026-31502 team: fix header_ops type confusion with non-Ethernet ports7.8 0.0013 None reported
High CVE-2026-31527 driver core: platform: use generic driver_override infrastructure7.8 0.0013 None reported
High CVE-2026-31528 perf: Make sure to use pmu_ctx->pmu for groups7.8 0.0013 None reported
High CVE-2026-31518 esp: fix skb leak with espintcp and async crypto7.1 0.0013 None reported
Showing 1 to 25 of 60 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.