# ALAS2023-2026-1693: Security update for 18 packages

ALAS2023-2026-1693, released May 8, 2026, fixes 78 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1693
- Platform: Linux
- Released: May 8, 2026
- Priority: High (Closes CVE-2026-43284, high severity)
- CVEs: 78, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1693.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel-livepatch-6.18.25-55.108](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.25-55.108.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |
| [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-55.108.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 |  |
| [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 |  |
| [CVE-2026-31637](https://patchblox.com/security/data/cve/CVE-2026-31637.md) | High | rxrpc: reject undecryptable rxkad response tickets | 9.8 | 0.0059 |  |
| [CVE-2026-43101](https://patchblox.com/security/data/cve/CVE-2026-43101.md) | High | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | 7.5 | 0.0059 |  |
| [CVE-2026-43099](https://patchblox.com/security/data/cve/CVE-2026-43099.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0050 |  |
| [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 |  |
| [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 |  |
| [CVE-2026-31669](https://patchblox.com/security/data/cve/CVE-2026-31669.md) | High | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 |  |
| [CVE-2026-43071](https://patchblox.com/security/data/cve/CVE-2026-43071.md) | High | kernel-uek: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [Orabug: 39323133] | 9.1 | 0.0046 |  |
| [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.1 | 0.0046 |  |
| [CVE-2026-31668](https://patchblox.com/security/data/cve/CVE-2026-31668.md) | High | seg6: separate dst_cache for input and output paths in seg6 lwtunnel | 9.8 | 0.0044 |  |
| [CVE-2026-31533](https://patchblox.com/security/data/cve/CVE-2026-31533.md) | High | kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758). | 9.8 | 0.0040 |  |
| [CVE-2026-31662](https://patchblox.com/security/data/cve/CVE-2026-31662.md) | High | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 |  |
| [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 |  |
| [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | 9.4 | 0.0037 |  |
| [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). | 8.8 | 0.0035 |  |
| [CVE-2026-31708](https://patchblox.com/security/data/cve/CVE-2026-31708.md) | High | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | 8.1 | 0.0035 |  |
| [CVE-2026-43350](https://patchblox.com/security/data/cve/CVE-2026-43350.md) | High | kernel-64kb: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). | 7.6 | 0.0032 |  |
| [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 |  |
| [CVE-2026-31600](https://patchblox.com/security/data/cve/CVE-2026-31600.md) | High | arm64: mm: Handle invalid large leaf mappings correctly | 7.5 | 0.0029 |  |
| [CVE-2026-31694](https://patchblox.com/security/data/cve/CVE-2026-31694.md) | High | fuse: reject oversized dirents in page cache | 7.8 | 0.0028 |  |
| [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 |  |
| [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 |  |
| [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 |  |
| [CVE-2026-31719](https://patchblox.com/security/data/cve/CVE-2026-31719.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: krb5enc - fix async decrypt skipping has... | 7.5 | 0.0018 |  |
| [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 |  |
| [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 |  |
| [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | kernel-64kb: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). | 7.8 | 0.0013 |  |
| [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 |  |
| [CVE-2026-31716](https://patchblox.com/security/data/cve/CVE-2026-31716.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate rec->used in journal-replay f... | 7.8 | 0.0013 |  |
| [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774). | 7.1 | 0.0013 |  |
| [CVE-2026-31418](https://patchblox.com/security/data/cve/CVE-2026-31418.md) | High | netfilter: ipset: drop logically empty buckets in mtype_del | 8.1 | 0.0013 |  |
| [CVE-2026-43084](https://patchblox.com/security/data/cve/CVE-2026-43084.md) | High | kernel-uek: netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [Orabug: 39339273] | 7.8 | 0.0013 |  |
| [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 |  |
| [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 |  |
| [CVE-2026-31591](https://patchblox.com/security/data/cve/CVE-2026-31591.md) | High | KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish | 7.0 | 0.0012 |  |
| [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 |  |
| [CVE-2026-31666](https://patchblox.com/security/data/cve/CVE-2026-31666.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 |  |
| [CVE-2026-31692](https://patchblox.com/security/data/cve/CVE-2026-31692.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check... | 7.8 | 0.0012 |  |
| [CVE-2026-31703](https://patchblox.com/security/data/cve/CVE-2026-31703.md) | High | kernel-64kb: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883). | 7.8 | 0.0012 |  |
| [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 |  |
| [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 |  |
| [CVE-2026-31700](https://patchblox.com/security/data/cve/CVE-2026-31700.md) | High | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | 7.8 | 0.0011 |  |
| [CVE-2026-43116](https://patchblox.com/security/data/cve/CVE-2026-43116.md) | High | netfilter: ctnetlink: ensure safe access to master conntrack | 8.8 | 0.0010 |  |
| [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 |  |
| [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 |  |
| [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 |  |
| [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 |  |
| [CVE-2026-31531](https://patchblox.com/security/data/cve/CVE-2026-31531.md) | Routine | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() | 5.5 | 0.0017 |  |
| [CVE-2026-43073](https://patchblox.com/security/data/cve/CVE-2026-43073.md) | Routine | x86-64: rename misleadingly named '__copy_user_nocache()' function | 5.5 | 0.0016 |  |
| [CVE-2026-31592](https://patchblox.com/security/data/cve/CVE-2026-31592.md) | Routine | KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock | 6.6 | 0.0016 |  |
| [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 |  |
| [CVE-2026-43118](https://patchblox.com/security/data/cve/CVE-2026-43118.md) | Routine | btrfs: fix zero size inode with non-zero size after log replay | 5.5 | 0.0016 |  |
| [CVE-2026-31579](https://patchblox.com/security/data/cve/CVE-2026-31579.md) | Routine | wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit | 5.5 | 0.0016 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 |  |
| [CVE-2026-31628](https://patchblox.com/security/data/cve/CVE-2026-31628.md) | Routine | x86/CPU: Fix FPDSS on Zen1 | 5.5 | 0.0013 |  |
| [CVE-2026-31634](https://patchblox.com/security/data/cve/CVE-2026-31634.md) | Routine | rxrpc: fix reference count leak in rxrpc_server_keyring() | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 |  |
| [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228). | 5.5 | 0.0012 |  |
| [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231). | 5.5 | 0.0012 |  |
| [CVE-2026-31575](https://patchblox.com/security/data/cve/CVE-2026-31575.md) | Routine | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 5.5 | 0.0012 |  |
| [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286). | 5.5 | 0.0012 |  |
| [CVE-2026-43090](https://patchblox.com/security/data/cve/CVE-2026-43090.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | kernel-64kb: xsk: validate MTU against usable frame size on bind (bsc#1264270). | 5.5 | 0.0012 |  |
| [CVE-2026-43100](https://patchblox.com/security/data/cve/CVE-2026-43100.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bridge: guard local VLAN-0 FDB helpers against N... | 5.5 | 0.0012 |  |
| [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 |  |
| [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 |  |
| [CVE-2026-31689](https://patchblox.com/security/data/cve/CVE-2026-31689.md) | Routine | EDAC/mc: Fix error path ordering in edac_mc_alloc() | 5.5 | 0.0012 |  |
| [CVE-2026-31713](https://patchblox.com/security/data/cve/CVE-2026-31713.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fuse: abort on fatal signal during sync init  Wh... | 5.5 | 0.0012 |  |
| [CVE-2026-31653](https://patchblox.com/security/data/cve/CVE-2026-31653.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/sysfs: dealloc repeat_call_control if d... | 5.5 | 0.0011 |  |
| [CVE-2026-31691](https://patchblox.com/security/data/cve/CVE-2026-31691.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  igb: remove napi_synchronize() in igb_down()  Wh... | 5.5 | 0.0011 |  |
| [CVE-2026-23394](https://patchblox.com/security/data/cve/CVE-2026-23394.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Give up GC if MSG_PEEK intervened | 4.7 | 0.0010 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.