Linux · 
Amazon Linux · Security advisory · June 22, 2026
Amazon Linux · Security advisory · June 22, 2026ALAS2023-2026-1894: Security update for 18 packages
ALAS2023-2026-1894, released June 22, 2026, fixes 150 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
150
16 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0074
54th percentile
Priority of the 150 CVEs
Patch now 0
Urgent 16
High 79
Routine 55
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool6.12 | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| bpftool6.12-debuginfo | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel-livepatch-6.12.92-122.166 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel6.12 | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-debuginfo | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-debuginfo-common-aarch64 | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-debuginfo-common-x86_64 | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-devel | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-headers | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-modules-extra | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-modules-extra-common | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-tools | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-tools-debuginfo | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| kernel6.12-tools-devel | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| perf6.12 | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| perf6.12-debuginfo | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| python3-perf6.12 | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
| python3-perf6.12-debuginfo | amzn 2023 | 1:6.12.92-122.166.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-64046 | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-64047 | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-64061 | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read... | 9.8 | 0.0047 | None reported |
| Urgent | CVE-2026-64232 | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-52955 | kernel-uek64k-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-64025 | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit... | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-46316 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache... | 9.3 | 0.0034 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| Urgent | CVE-2026-53009 | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-64106 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o... | 9.0 | 0.0015 | None reported |
| Urgent | CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2026-53053 | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | None reported |
| Urgent | CVE-2026-53077 | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | None reported |
| Urgent | CVE-2026-53062 | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | None reported |
| High | CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | None reported |
| High | CVE-2026-53003 | pppoe: drop PFC frames | 7.5 | 0.0072 | None reported |
| High | CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | None reported |
| High | CVE-2026-43083 | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | None reported |
| High | CVE-2026-52999 | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | None reported |
| High | CVE-2026-52998 | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | None reported |
| High | CVE-2026-52981 | linux: In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_... | 7.5 | 0.0053 | None reported |
| High | CVE-2026-64113 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | None reported |
| High | CVE-2026-52954 | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | None reported |
Showing 1 to 25 of 150
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.