# ALAS2023-2026-1430: Security update for 22 packages

ALAS2023-2026-1430, released February 16, 2026, fixes 76 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1430
- Platform: Linux
- Released: Feb 16, 2026
- Priority: Urgent (Closes CVE-2025-68341, rated Critical)
- CVEs: 76, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1430.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel-livepatch-6.12.63-84.121](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.63-84.121.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |
| [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.63-84.121.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-68341](https://patchblox.com/security/data/cve/CVE-2025-68341.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  veth: reduce XDP no_direct return section to fix... | 9.8 | 0.0044 |  |
| [CVE-2025-40212](https://patchblox.com/security/data/cve/CVE-2025-40212.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: fix refcount leak in nfsd_set_fh_dentry()... | 9.8 | 0.0043 |  |
| [CVE-2025-40251](https://patchblox.com/security/data/cve/CVE-2025-40251.md) | Urgent | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 |  |
| [CVE-2025-68349](https://patchblox.com/security/data/cve/CVE-2025-68349.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 |  |
| [CVE-2025-68284](https://patchblox.com/security/data/cve/CVE-2025-68284.md) | High | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 |  |
| [CVE-2025-68285](https://patchblox.com/security/data/cve/CVE-2025-68285.md) | High | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 |  |
| [CVE-2025-68261](https://patchblox.com/security/data/cve/CVE-2025-68261.md) | High | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 |  |
| [CVE-2025-68337](https://patchblox.com/security/data/cve/CVE-2025-68337.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 |  |
| [CVE-2025-68283](https://patchblox.com/security/data/cve/CVE-2025-68283.md) | High | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 |  |
| [CVE-2025-40257](https://patchblox.com/security/data/cve/CVE-2025-40257.md) | High | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 |  |
| [CVE-2025-40258](https://patchblox.com/security/data/cve/CVE-2025-40258.md) | High | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 |  |
| [CVE-2025-40075](https://patchblox.com/security/data/cve/CVE-2025-40075.md) | High | tcp_metrics: use dst_dev_net_rcu() | 8.1 | 0.0049 |  |
| [CVE-2025-40271](https://patchblox.com/security/data/cve/CVE-2025-40271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc: fix uaf in proc_readdir_de()  Pde is er... | 7.8 | 0.0049 |  |
| [CVE-2025-68241](https://patchblox.com/security/data/cve/CVE-2025-68241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 |  |
| [CVE-2025-40273](https://patchblox.com/security/data/cve/CVE-2025-40273.md) | High | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 |  |
| [CVE-2025-68369](https://patchblox.com/security/data/cve/CVE-2025-68369.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ntfs3: init run lock for extend inode  After set... | 7.5 | 0.0046 |  |
| [CVE-2025-68226](https://patchblox.com/security/data/cve/CVE-2025-68226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix incomplete backport in cfids_in... | 8.8 | 0.0035 |  |
| [CVE-2025-38678](https://patchblox.com/security/data/cve/CVE-2025-38678.md) | High | netfilter: nf_tables: reject duplicate device on updates | 7.1 | 0.0029 |  |
| [CVE-2025-40277](https://patchblox.com/security/data/cve/CVE-2025-40277.md) | High | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 |  |
| [CVE-2025-40281](https://patchblox.com/security/data/cve/CVE-2025-40281.md) | High | sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto | 7.0 | 0.0023 |  |
| [CVE-2025-68361](https://patchblox.com/security/data/cve/CVE-2025-68361.md) | High | kernel-64kb: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526). | n/a | 0.0023 |  |
| [CVE-2025-68227](https://patchblox.com/security/data/cve/CVE-2025-68227.md) | High | mptcp: Fix proto fallback detection with BPF | 7.8 | 0.0022 |  |
| [CVE-2025-40259](https://patchblox.com/security/data/cve/CVE-2025-40259.md) | High | scsi: sg: Do not sleep in atomic context | 7.0 | 0.0022 |  |
| [CVE-2025-68297](https://patchblox.com/security/data/cve/CVE-2025-68297.md) | High | ceph: fix crash in process_v2_sparse_read() for encrypted directories | 7.0 | 0.0021 |  |
| [CVE-2025-68366](https://patchblox.com/security/data/cve/CVE-2025-68366.md) | High | kernel-64kb: nbd: defer config unlock in nbd_genl_connect (bsc#1255622). | 8.8 | 0.0020 |  |
| [CVE-2025-68371](https://patchblox.com/security/data/cve/CVE-2025-68371.md) | High | kernel-64kb: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572). | 7.0 | 0.0020 |  |
| [CVE-2025-68325](https://patchblox.com/security/data/cve/CVE-2025-68325.md) | High | kernel-64kb: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417). | n/a | 0.0020 |  |
| [CVE-2025-68202](https://patchblox.com/security/data/cve/CVE-2025-68202.md) | High | kernel-64kb: sched_ext: Fix unsafe locking in the scx_dump_state() (bsc#1255223). | n/a | 0.0020 |  |
| [CVE-2025-68210](https://patchblox.com/security/data/cve/CVE-2025-68210.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-68727](https://patchblox.com/security/data/cve/CVE-2025-68727.md) | High | kernel-64kb: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568). | n/a | 0.0019 |  |
| [CVE-2025-68728](https://patchblox.com/security/data/cve/CVE-2025-68728.md) | High | kernel-64kb: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539). | n/a | 0.0019 |  |
| [CVE-2025-40214](https://patchblox.com/security/data/cve/CVE-2025-40214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Initialise scc_index in unix_add_edge() | 7.8 | 0.0019 |  |
| [CVE-2025-68756](https://patchblox.com/security/data/cve/CVE-2025-68756.md) | High | block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock | 7.1 | 0.0019 |  |
| [CVE-2025-68237](https://patchblox.com/security/data/cve/CVE-2025-68237.md) | High | mtdchar: fix integer overflow in read/write ioctls | 7.8 | 0.0019 |  |
| [CVE-2025-68231](https://patchblox.com/security/data/cve/CVE-2025-68231.md) | High | mm/mempool: fix poisoning order>0 pages with HIGHMEM | 7.1 | 0.0019 |  |
| [CVE-2025-40250](https://patchblox.com/security/data/cve/CVE-2025-40250.md) | High | net/mlx5: Clean up only new IRQ glue on request_irq() failure | 7.8 | 0.0017 |  |
| [CVE-2025-40248](https://patchblox.com/security/data/cve/CVE-2025-40248.md) | High | vsock: Ignore signal/timeout on connect() if already established | 7.8 | 0.0017 |  |
| [CVE-2025-68764](https://patchblox.com/security/data/cve/CVE-2025-68764.md) | High | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags | 7.8 | 0.0017 |  |
| [CVE-2025-40266](https://patchblox.com/security/data/cve/CVE-2025-40266.md) | High | KVM: arm64: Check the untrusted offset in FF-A memory share | 8.2 | 0.0016 |  |
| [CVE-2025-68265](https://patchblox.com/security/data/cve/CVE-2025-68265.md) | High | nvme: fix admin request_queue lifetime | 7.8 | 0.0016 |  |
| [CVE-2025-40215](https://patchblox.com/security/data/cve/CVE-2025-40215.md) | High | xfrm: delete x->tunnel as we delete x | 7.8 | 0.0015 |  |
| [CVE-2025-68208](https://patchblox.com/security/data/cve/CVE-2025-68208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: account for current allocated stack depth i... | 7.8 | 0.0015 |  |
| [CVE-2025-40272](https://patchblox.com/security/data/cve/CVE-2025-40272.md) | High | mm/secretmem: fix use-after-free race in fault handler | 7.8 | 0.0015 |  |
| [CVE-2025-68340](https://patchblox.com/security/data/cve/CVE-2025-68340.md) | High | kernel-64kb: team: Move team device type change at the end of team_port_add (bsc#1255507). | 7.0 | 0.0015 |  |
| [CVE-2025-40274](https://patchblox.com/security/data/cve/CVE-2025-40274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: guest_memfd: Remove bindings on memslot del... | 7.8 | 0.0015 |  |
| [CVE-2025-68746](https://patchblox.com/security/data/cve/CVE-2025-68746.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: tegra210-quad: Fix timeout handling  When t... | 7.8 | 0.0014 |  |
| [CVE-2025-68724](https://patchblox.com/security/data/cve/CVE-2025-68724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: asymmetric_keys - prevent overflow in as... | 8.1 | 0.0014 |  |
| [CVE-2025-40254](https://patchblox.com/security/data/cve/CVE-2025-40254.md) | Routine | net: openvswitch: remove never-working support for setting nsh fields | 5.5 | 0.0026 |  |
| [CVE-2025-68264](https://patchblox.com/security/data/cve/CVE-2025-68264.md) | Routine | ext4: refresh inline data size before write operations | 5.5 | 0.0022 |  |
| [CVE-2025-68378](https://patchblox.com/security/data/cve/CVE-2025-68378.md) | Routine | kernel-64kb: bpf: Refactor stack map trace depth calculation into helper function (bsc#1255614). | 5.5 | 0.0022 |  |
| [CVE-2025-68374](https://patchblox.com/security/data/cve/CVE-2025-68374.md) | Routine | kernel-64kb: md: fix rcu protection in md_wakeup_thread (bsc#1255530). | 5.5 | 0.0021 |  |
| [CVE-2025-68742](https://patchblox.com/security/data/cve/CVE-2025-68742.md) | Routine | kernel-64kb: bpf: Improve program stats run-time calculation (bsc#1255707). | 5.8 | 0.0021 |  |
| [CVE-2025-68363](https://patchblox.com/security/data/cve/CVE-2025-68363.md) | Routine | kernel-64kb: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552). | 5.5 | 0.0021 |  |
| [CVE-2025-40279](https://patchblox.com/security/data/cve/CVE-2025-40279.md) | Routine | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | 6.1 | 0.0021 |  |
| [CVE-2025-68331](https://patchblox.com/security/data/cve/CVE-2025-68331.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-68292](https://patchblox.com/security/data/cve/CVE-2025-68292.md) | Routine | kernel-64kb: mm/memfd: fix information leak in hugetlb folios (bsc#1255148). | 5.5 | 0.0021 |  |
| [CVE-2025-68200](https://patchblox.com/security/data/cve/CVE-2025-68200.md) | Routine | kernel-64kb: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241). | 5.5 | 0.0021 |  |
| [CVE-2025-68295](https://patchblox.com/security/data/cve/CVE-2025-68295.md) | Routine | smb: client: fix memory leak in cifs_construct_tcon() | 5.5 | 0.0021 |  |
| [CVE-2025-68740](https://patchblox.com/security/data/cve/CVE-2025-68740.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-68293](https://patchblox.com/security/data/cve/CVE-2025-68293.md) | Routine | kernel-64kb: mm/huge_memory: fix NULL pointer deference when splitting folio (bsc#1255150). | 5.5 | 0.0021 |  |
| [CVE-2025-68288](https://patchblox.com/security/data/cve/CVE-2025-68288.md) | Routine | usb: storage: Fix memory leak in USB bulk transport | 5.5 | 0.0021 |  |
| [CVE-2025-68296](https://patchblox.com/security/data/cve/CVE-2025-68296.md) | Routine | drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup | 5.5 | 0.0021 |  |
| [CVE-2025-68229](https://patchblox.com/security/data/cve/CVE-2025-68229.md) | Routine | scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() | 5.5 | 0.0020 |  |
| [CVE-2025-68348](https://patchblox.com/security/data/cve/CVE-2025-68348.md) | Routine | kernel-64kb: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694). | 5.5 | 0.0020 |  |
| [CVE-2025-40268](https://patchblox.com/security/data/cve/CVE-2025-40268.md) | Routine | cifs: client: fix memory leak in smb3_fs_context_parse_param | 5.5 | 0.0020 |  |
| [CVE-2025-68219](https://patchblox.com/security/data/cve/CVE-2025-68219.md) | Routine | cifs: fix memory leak in smb3_fs_context_parse_param error path | 5.9 | 0.0020 |  |
| [CVE-2025-40287](https://patchblox.com/security/data/cve/CVE-2025-40287.md) | Routine | exfat: fix improper check of dentry.stream.valid_size | 5.5 | 0.0020 |  |
| [CVE-2025-68198](https://patchblox.com/security/data/cve/CVE-2025-68198.md) | Routine | crash: fix crashkernel resource shrink | 5.5 | 0.0020 |  |
| [CVE-2025-68372](https://patchblox.com/security/data/cve/CVE-2025-68372.md) | Routine | kernel-64kb: nbd: defer config put in recv_work (bsc#1255537). | 5.5 | 0.0020 |  |
| [CVE-2025-68199](https://patchblox.com/security/data/cve/CVE-2025-68199.md) | Routine | kernel-uek: ELSA-2026-50006: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.8 | 0.0020 |  |
| [CVE-2025-68259](https://patchblox.com/security/data/cve/CVE-2025-68259.md) | Routine | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | 6.2 | 0.0019 |  |
| [CVE-2025-68244](https://patchblox.com/security/data/cve/CVE-2025-68244.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0019 |  |
| [CVE-2025-68744](https://patchblox.com/security/data/cve/CVE-2025-68744.md) | Routine | kernel-64kb: bpf: Free special fields when update [lru_,]percpu_hash maps (bsc#1255709). | 5.5 | 0.0019 |  |
| [CVE-2025-68329](https://patchblox.com/security/data/cve/CVE-2025-68329.md) | Routine | kernel-64kb: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490). | 5.5 | 0.0018 |  |
| [CVE-2025-68242](https://patchblox.com/security/data/cve/CVE-2025-68242.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.5 | 0.0018 |  |
| [CVE-2025-68214](https://patchblox.com/security/data/cve/CVE-2025-68214.md) | Routine | timers: Fix NULL function pointer race in timer_shutdown_sync() | 5.5 | 0.0013 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.