Linux · Amazon Linux · Security advisory · May 11, 2026

ALAS2023-2026-1681: Security update for 22 packages

ALAS2023-2026-1681, released May 11, 2026, fixes 174 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
174
7 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0159
75th percentile

Priority of the 174 CVEs

Patch now 0 Urgent 7 High 93 Routine 74

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20231:6.1.168-202.320.amzn2023
bpftool-debuginfoamzn 20231:6.1.168-202.320.amzn2023
kernelamzn 20231:6.1.168-202.320.amzn2023
kernel-debuginfoamzn 20231:6.1.168-202.320.amzn2023
kernel-debuginfo-common-aarch64amzn 20231:6.1.168-202.320.amzn2023
kernel-debuginfo-common-x86_64amzn 20231:6.1.168-202.320.amzn2023
kernel-develamzn 20231:6.1.168-202.320.amzn2023
kernel-headersamzn 20231:6.1.168-202.320.amzn2023
kernel-libbpfamzn 20231:6.1.168-202.320.amzn2023
kernel-libbpf-debuginfoamzn 20231:6.1.168-202.320.amzn2023
kernel-libbpf-develamzn 20231:6.1.168-202.320.amzn2023
kernel-libbpf-staticamzn 20231:6.1.168-202.320.amzn2023
kernel-livepatch-6.1.168-202.320amzn 20231:1.0-0.amzn2023
kernel-modules-extraamzn 20231:6.1.168-202.320.amzn2023
kernel-modules-extra-commonamzn 20231:6.1.168-202.320.amzn2023
kernel-toolsamzn 20231:6.1.168-202.320.amzn2023
kernel-tools-debuginfoamzn 20231:6.1.168-202.320.amzn2023
kernel-tools-develamzn 20231:6.1.168-202.320.amzn2023
perfamzn 20231:6.1.168-202.320.amzn2023
perf-debuginfoamzn 20231:6.1.168-202.320.amzn2023
python3-perfamzn 20231:6.1.168-202.320.amzn2023
python3-perf-debuginfoamzn 20231:6.1.168-202.320.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-31402 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...9.8 0.0122 None reported
Urgent CVE-2025-68206 netfilter: nft_ct: add seqadj extension for natted connections9.1 0.0071 None reported
Urgent CVE-2026-43407 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in c...9.1 0.0066 None reported
Urgent CVE-2026-43406 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads i...9.1 0.0061 None reported
Urgent CVE-2026-43383 linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t...9.4 0.0054 None reported
Urgent CVE-2026-43341 linux: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparoun...9.8 0.0051 None reported
Urgent CVE-2026-45899 ext4: drop extent cache when splitting extent fails9.8 0.0016 None reported
High CVE-2026-23455 kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng...9.1 0.0159 None reported
High CVE-2025-40135 ipv6: use RCU in ip6_xmit()8.4 0.0071 None reported
High CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 0.0069 None reported
High CVE-2026-31682 bridge: br_nd_send: linearize skb before parsing ND options9.1 0.0064 None reported
High CVE-2026-43405 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in ceph...7.5 0.0060 None reported
High CVE-2026-43441 linux: In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when I...7.5 0.0059 None reported
High CVE-2026-31414 netfilter: nf_conntrack_expect: use expect->helper9.8 0.0058 None reported
High CVE-2026-23456 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in de...8.2 0.0054 None reported
High CVE-2026-43452 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers agains...8.2 0.0054 None reported
High CVE-2026-43365 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...8.2 0.0051 None reported
High CVE-2026-31448 ext4: avoid infinite loops caused by residual data9.4 0.0050 None reported
High CVE-2026-23457 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length...8.6 0.0045 None reported
High CVE-2026-43057 linux: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_C...7.5 0.0044 None reported
High CVE-2026-31450 ext4: publish jinode after initialization8.8 0.0041 None reported
High CVE-2026-43466 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ r...8.2 0.0041 None reported
High CVE-2026-31467 erofs: add GFP_NOIO in the bio completion if needed8.8 0.0038 None reported
High CVE-2026-31570 can: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 0.0026 None reported
High CVE-2026-43038 kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...9.8 0.0026 None reported
Showing 1 to 25 of 174 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.