Linux · 
Amazon Linux · Security advisory · September 14, 2026
Amazon Linux · Security advisory · September 14, 2026ALAS2023-2026-2143: Security update for 18 packages
ALAS2023-2026-2143, released September 14, 2026, fixes 232 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
232
17 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0147
73rd percentile
Priority of the 232 CVEs
Patch now 0
Urgent 17
High 157
Routine 58
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-debuginfo | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-devel | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-headers | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-livepatch-6.1.186-228.374 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel-modules-extra | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-modules-extra-common | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-tools | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| kernel-tools-devel | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| perf | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| perf-debuginfo | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| python3-perf | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 1:6.1.186-228.374.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-72299 | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra... | 9.8 | 0.0075 | None reported |
| Urgent | CVE-2026-72191 | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_inser... | 9.8 | 0.0070 | None reported |
| Urgent | CVE-2026-68127 | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 9.8 | 0.0054 | None reported |
| Urgent | CVE-2026-80557 | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m... | 9.8 | 0.0053 | None reported |
| Urgent | CVE-2026-80681 | vxlan: re-fetch eth header after route_shortcircuit() | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-80725 | linux: In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation... | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2026-68121 | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-72288 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt... | 9.3 | 0.0019 | None reported |
| Urgent | CVE-2026-68132 | super: fix emergency thaw deadlock on frozen block devices | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-68146 | ftrace: Add global mutex to serialize trace_parser access | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-68325 | iommu/amd: Bound the early ACPI HID map | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-80686 | mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-68399 | bpf: Fix UAF in sock clone early bailouts | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-64562 | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-80715 | igc: remove napi_synchronize() in igc_down() | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-68153 | libceph: remove debugfs files before client teardown | 9.8 | 0.0013 | None reported |
| Urgent | CVE-2026-68142 | geneve: require CAP_NET_ADMIN in the device netns for changelink | 9.8 | 0.0012 | None reported |
| High | CVE-2026-74469 | sctp: prevent peer transport count overflow | 8.8 | 0.0147 | None reported |
| High | CVE-2026-72398 | sctp: add INIT verification after cookie unpacking | 9.8 | 0.0080 | None reported |
| High | CVE-2026-68159 | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | 9.8 | 0.0075 | None reported |
| High | CVE-2026-68154 | libceph: reject zero bucket types in crush_decode | 9.8 | 0.0071 | None reported |
| High | CVE-2026-68158 | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 | None reported |
| High | CVE-2026-72242 | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_... | 8.8 | 0.0070 | None reported |
| High | CVE-2026-68157 | libceph: guard missing CRUSH type name lookup | 7.8 | 0.0070 | None reported |
| High | CVE-2026-72253 | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()... | 7.5 | 0.0070 | None reported |
Showing 1 to 25 of 232
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.