Linux · Amazon Linux · Security advisory · August 31, 2026

ALAS2023-2026-2107: Security update for 18 packages

ALAS2023-2026-2107, released August 31, 2026, fixes 14 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
4 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0143
73rd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 4 High 10 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20231:6.1.182-227.379.amzn2023
bpftool-debuginfoamzn 20231:6.1.182-227.379.amzn2023
kernelamzn 20231:6.1.182-227.379.amzn2023
kernel-debuginfoamzn 20231:6.1.182-227.379.amzn2023
kernel-debuginfo-common-aarch64amzn 20231:6.1.182-227.379.amzn2023
kernel-debuginfo-common-x86_64amzn 20231:6.1.182-227.379.amzn2023
kernel-develamzn 20231:6.1.182-227.379.amzn2023
kernel-headersamzn 20231:6.1.182-227.379.amzn2023
kernel-livepatch-6.1.182-227.379amzn 20231:1.0-0.amzn2023
kernel-modules-extraamzn 20231:6.1.182-227.379.amzn2023
kernel-modules-extra-commonamzn 20231:6.1.182-227.379.amzn2023
kernel-toolsamzn 20231:6.1.182-227.379.amzn2023
kernel-tools-debuginfoamzn 20231:6.1.182-227.379.amzn2023
kernel-tools-develamzn 20231:6.1.182-227.379.amzn2023
perfamzn 20231:6.1.182-227.379.amzn2023
perf-debuginfoamzn 20231:6.1.182-227.379.amzn2023
python3-perfamzn 20231:6.1.182-227.379.amzn2023
python3-perf-debuginfoamzn 20231:6.1.182-227.379.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing9.8 0.0143 None reported
Urgent CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 0.0077 None reported
Urgent CVE-2026-68131 rbd: Reset positive result codes to zero in object map update path9.8 0.0052 None reported
Urgent CVE-2026-64017 blk-mq: pop cached request if it is usable9.8 0.0013 None reported
High CVE-2026-68155 libceph: Reject monmaps advertising zero monitors8.8 0.0070 None reported
High CVE-2026-68299 vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets8.8 0.0050 None reported
High CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration8.8 0.0041 None reported
High CVE-2026-74556 scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 0.0040 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection8.8 0.0023 None reported
High CVE-2026-68138 net/sched: serialize qdisc_rtab_list against concurrent get/put8.8 0.0022 None reported
High CVE-2026-72051 linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the de...8.8 0.0015 None reported
High CVE-2026-68338 net/packet: avoid fanout hook re-registration after unregister8.8 0.0014 None reported
High CVE-2026-68335 rds: drop incoming messages that cross network namespace boundaries7.8 0.0014 None reported
High CVE-2026-64581 xfrm: fix sk_dst_cache double-free in xfrm_user_policy()7.8 0.0012 None reported
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.