Linux · Amazon Linux · Security advisory · August 31, 2026

ALAS2023-2026-2106: Security update for 19 packages

ALAS2023-2026-2106, released August 31, 2026, fixes 197 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
197
17 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0147
73rd percentile

Priority of the 197 CVEs

Patch now 0 Urgent 17 High 132 Routine 48

Fixed package versions

ProductReleaseFixed in
bpftool6.18amzn 20231:6.18.44-99.149.amzn2023
bpftool6.18-debuginfoamzn 20231:6.18.44-99.149.amzn2023
kernel-livepatch-6.18.44-99.149amzn 20231:1.0-0.amzn2023
kernel6.18amzn 20231:6.18.44-99.149.amzn2023
kernel6.18-debuginfoamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-debuginfo-common-aarch64amzn 20231:6.18.44-99.149.amzn2023
kernel6.18-debuginfo-common-x86_64amzn 20231:6.18.44-99.149.amzn2023
kernel6.18-develamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-headersamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-modules-extraamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-modules-extra-commonamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-toolsamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-tools-debuginfoamzn 20231:6.18.44-99.149.amzn2023
kernel6.18-tools-develamzn 20231:6.18.44-99.149.amzn2023
microvm-kernel6.18amzn 20231:6.18.44-99.149.amzn2023
perf6.18amzn 20231:6.18.44-99.149.amzn2023
perf6.18-debuginfoamzn 20231:6.18.44-99.149.amzn2023
python3-perf6.18amzn 20231:6.18.44-99.149.amzn2023
python3-perf6.18-debuginfoamzn 20231:6.18.44-99.149.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing9.8 0.0143 None reported
Urgent CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 0.0077 None reported
Urgent CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit9.8 0.0064 None reported
Urgent CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust9.8 0.0054 None reported
Urgent CVE-2026-68131 rbd: Reset positive result codes to zero in object map update path9.8 0.0052 None reported
Urgent CVE-2026-80681 vxlan: re-fetch eth header after route_shortcircuit()9.8 0.0050 None reported
Urgent CVE-2026-68121 pppoe: reload header pointer after dev_hard_header()9.8 0.0037 None reported
Urgent CVE-2026-68166 userfaultfd: prevent registration of special VMAs9.8 0.0021 None reported
Urgent CVE-2026-68132 super: fix emergency thaw deadlock on frozen block devices9.8 0.0018 None reported
Urgent CVE-2026-68146 ftrace: Add global mutex to serialize trace_parser access9.8 0.0018 None reported
Urgent CVE-2026-68325 iommu/amd: Bound the early ACPI HID map9.8 0.0018 None reported
Urgent CVE-2026-80686 mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE9.8 0.0017 None reported
Urgent CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR9.8 0.0016 None reported
Urgent CVE-2026-80715 igc: remove napi_synchronize() in igc_down()9.8 0.0016 None reported
Urgent CVE-2026-64017 blk-mq: pop cached request if it is usable9.8 0.0013 None reported
Urgent CVE-2026-68153 libceph: remove debugfs files before client teardown9.8 0.0013 None reported
Urgent CVE-2026-68142 geneve: require CAP_NET_ADMIN in the device netns for changelink9.8 0.0012 None reported
High CVE-2026-74469 sctp: prevent peer transport count overflow8.8 0.0147 None reported
High CVE-2026-68154 libceph: reject zero bucket types in crush_decode9.8 0.0071 None reported
High CVE-2026-68158 libceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 0.0071 None reported
High CVE-2026-68155 libceph: Reject monmaps advertising zero monitors8.8 0.0070 None reported
High CVE-2026-68157 libceph: guard missing CRUSH type name lookup7.8 0.0070 None reported
High CVE-2026-72253 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()...7.5 0.0070 None reported
High CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 0.0069 None reported
High CVE-2026-68161 sctp: close UDP tunnel sockets during netns teardown9.8 0.0068 None reported
Showing 1 to 25 of 197 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.