# ALAS2023-2026-1487: Security update for 22 packages ALAS2023-2026-1487, released March 16, 2026, fixes 32 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1487 - Platform: Linux - Released: Mar 16, 2026 - Priority: High (Closes CVE-2026-23111, high severity) - CVEs: 32, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1487.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel-livepatch-6.12.73-95.123](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.73-95.123.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.73-95.123.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-64kb: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181). | 7.8 | 0.0113 | | | [CVE-2026-23193](https://patchblox.com/security/data/cve/CVE-2026-23193.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414). | 7.8 | 0.0036 | | | [CVE-2026-23230](https://patchblox.com/security/data/cve/CVE-2026-23230.md) | High | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 | | | [CVE-2026-23214](https://patchblox.com/security/data/cve/CVE-2026-23214.md) | High | btrfs: reject new transactions if the fs is fully read-only | 8.4 | 0.0018 | | | [CVE-2026-23209](https://patchblox.com/security/data/cve/CVE-2026-23209.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-23204](https://patchblox.com/security/data/cve/CVE-2026-23204.md) | High | kernel-64kb: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340). | 8.1 | 0.0016 | | | [CVE-2026-23156](https://patchblox.com/security/data/cve/CVE-2026-23156.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-23224](https://patchblox.com/security/data/cve/CVE-2026-23224.md) | High | erofs: fix UAF issue for file-backed mounts w/ directio option | 7.8 | 0.0014 | | | [CVE-2026-23216](https://patchblox.com/security/data/cve/CVE-2026-23216.md) | High | scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() | 8.8 | 0.0014 | | | [CVE-2026-23223](https://patchblox.com/security/data/cve/CVE-2026-23223.md) | High | xfs: fix UAF in xchk_btree_check_block_owner | 7.8 | 0.0014 | | | [CVE-2026-23168](https://patchblox.com/security/data/cve/CVE-2026-23168.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq... | 7.8 | 0.0014 | | | [CVE-2026-23215](https://patchblox.com/security/data/cve/CVE-2026-23215.md) | High | x86/vmware: Fix hypercall clobbers | 8.4 | 0.0013 | | | [CVE-2026-23161](https://patchblox.com/security/data/cve/CVE-2026-23161.md) | High | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0011 | | | [CVE-2026-31688](https://patchblox.com/security/data/cve/CVE-2026-31688.md) | High | driver core: enforce device_lock for driver_match_device() | 7.8 | n/a | | | [CVE-2025-71268](https://patchblox.com/security/data/cve/CVE-2025-71268.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865). | 5.5 | 0.0033 | | | [CVE-2026-23177](https://patchblox.com/security/data/cve/CVE-2026-23177.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0020 | | | [CVE-2026-23154](https://patchblox.com/security/data/cve/CVE-2026-23154.md) | Routine | kernel-64kb: net: fix segmentation of forwarding fraglist GRO (bsc#1258286). | 5.5 | 0.0018 | | | [CVE-2026-23198](https://patchblox.com/security/data/cve/CVE-2026-23198.md) | Routine | kernel-64kb: KVM: Don't clobber irqfd routing type when deassigning irqfd (bsc#1258321). | 5.5 | 0.0015 | | | [CVE-2026-23169](https://patchblox.com/security/data/cve/CVE-2026-23169.md) | Routine | kernel-64kb: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389). | 5.6 | 0.0014 | | | [CVE-2026-23159](https://patchblox.com/security/data/cve/CVE-2026-23159.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.1 | 0.0014 | | | [CVE-2026-23173](https://patchblox.com/security/data/cve/CVE-2026-23173.md) | Routine | kernel-64kb: net/mlx5e: TC, delete flows only for existing peers (bsc#1258520). | 5.5 | 0.0014 | | | [CVE-2026-23200](https://patchblox.com/security/data/cve/CVE-2026-23200.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 | | | [CVE-2026-23189](https://patchblox.com/security/data/cve/CVE-2026-23189.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 | | | [CVE-2026-23201](https://patchblox.com/security/data/cve/CVE-2026-23201.md) | Routine | cephfs: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337). | 5.5 | 0.0014 | | | [CVE-2026-23205](https://patchblox.com/security/data/cve/CVE-2026-23205.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 | | | [CVE-2026-23219](https://patchblox.com/security/data/cve/CVE-2026-23219.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2025-71225](https://patchblox.com/security/data/cve/CVE-2025-71225.md) | Routine | md: suspend array while updating raid_disks via sysfs | 5.3 | 0.0013 | | | [CVE-2026-23254](https://patchblox.com/security/data/cve/CVE-2026-23254.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-23260](https://patchblox.com/security/data/cve/CVE-2026-23260.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-23199](https://patchblox.com/security/data/cve/CVE-2026-23199.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 | | | [CVE-2026-23202](https://patchblox.com/security/data/cve/CVE-2026-23202.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 | | | [CVE-2026-23212](https://patchblox.com/security/data/cve/CVE-2026-23212.md) | Routine | bonding: annotate data-races around slave->last_rx | 5.5 | 0.0010 | | --- Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.