Linux · 
Amazon Linux · Security advisory · June 22, 2026
Amazon Linux · Security advisory · June 22, 2026ALAS2023-2026-1882: Security update for 18 packages
ALAS2023-2026-1882, released June 22, 2026, fixes 166 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
166
12 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0537
92nd percentile
Priority of the 166 CVEs
Patch now 0
Urgent 12
High 105
Routine 49
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-devel | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-headers | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-livepatch-6.1.175-219.357 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel-modules-extra | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-modules-extra-common | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-tools | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-tools-devel | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| perf | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| perf-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| python3-perf | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-64046 | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-64047 | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-43071 | linux: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to tw... | 9.1 | 0.0046 | None reported |
| Urgent | CVE-2026-43117 | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-52955 | kernel-uek64k-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| Urgent | CVE-2026-64106 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o... | 9.0 | 0.0015 | None reported |
| Urgent | CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2026-53077 | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | None reported |
| Urgent | CVE-2026-53062 | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | None reported |
| High | CVE-2026-43499 | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 | None reported |
| High | CVE-2026-46242 | kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0458 | None reported |
| High | CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | None reported |
| High | CVE-2026-53003 | pppoe: drop PFC frames | 7.5 | 0.0072 | None reported |
| High | CVE-2026-43493 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | None reported |
| High | CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | None reported |
| High | CVE-2026-43083 | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | None reported |
| High | CVE-2026-52999 | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | None reported |
| High | CVE-2026-52998 | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | None reported |
| High | CVE-2026-46102 | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 | None reported |
| High | CVE-2026-52981 | linux: In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_... | 7.5 | 0.0053 | None reported |
| High | CVE-2026-64113 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | None reported |
| High | CVE-2026-46119 | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 | None reported |
Showing 1 to 25 of 166
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.