Linux · 
Amazon Linux · Security advisory · July 6, 2026
Amazon Linux · Security advisory · July 6, 2026ALAS2023-2026-1925: Security update for 19 packages
ALAS2023-2026-1925, released July 6, 2026, fixes 84 CVEs across 19 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
84
2 rated Critical
Exploited
1
CVE-2026-53266
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0093
60th percentile
Priority of the 84 CVEs
Patch now 1
Urgent 2
High 55
Routine 26
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| bpftool6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel-livepatch-6.18.36-69.134 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-debuginfo-common-aarch64 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-debuginfo-common-x86_64 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-devel | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-headers | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-modules-extra | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-modules-extra-common | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-tools | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-tools-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-tools-devel | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| microvm-kernel6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| perf6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| perf6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| python3-perf6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| python3-perf6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | KEVExploited |
| Urgent | CVE-2026-53224 | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address l... | 9.1 | 0.0057 | None reported |
| Urgent | CVE-2026-53175 | linux: In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fq... | 9.8 | 0.0031 | None reported |
| High | CVE-2026-52929 | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | None reported |
| High | CVE-2026-52924 | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-53221 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 | None reported |
| High | CVE-2026-53228 | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | None reported |
| High | CVE-2026-53225 | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 | None reported |
| High | CVE-2026-53268 | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 | None reported |
| High | CVE-2026-53183 | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 | None reported |
| High | CVE-2026-53184 | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 | None reported |
| High | CVE-2026-53264 | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 | None reported |
| High | CVE-2026-53229 | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD... | 7.5 | 0.0048 | None reported |
| High | CVE-2026-52946 | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 | None reported |
| High | CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | None reported |
| High | CVE-2026-53235 | linux: In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list... | 7.8 | 0.0044 | None reported |
| High | CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | None reported |
| High | CVE-2026-53180 | linux: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_r... | 7.5 | 0.0034 | None reported |
| High | CVE-2026-63867 | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.2 | 0.0027 | None reported |
| High | CVE-2026-53275 | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | None reported |
| High | CVE-2026-53232 | net: phy: clean the sfp upstream if phy probing fails | 8.8 | 0.0026 | None reported |
| High | CVE-2026-46320 | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 | None reported |
| High | CVE-2026-53212 | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 | None reported |
| High | CVE-2026-53191 | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE acro... | 7.8 | 0.0018 | None reported |
Showing 1 to 25 of 84
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.