Linux · Amazon Linux · Security advisory · March 2, 2026

ALAS2023-2026-1455: Security update for 22 packages

ALAS2023-2026-1455, released March 2, 2026, fixes 48 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
48
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0055
46th percentile

Priority of the 48 CVEs

Patch now 0 Urgent 0 High 15 Routine 33

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.68-92.122.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.68-92.122.amzn2023
kernel-livepatch-6.12.68-92.122amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.68-92.122.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.68-92.122.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.68-92.122.amzn2023
kernel6.12-develamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-headersamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-libbpfamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-libbpf-debuginfoamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-libbpf-develamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-libbpf-staticamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-toolsamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.68-92.122.amzn2023
kernel6.12-tools-develamzn 20231:6.12.68-92.122.amzn2023
perf6.12amzn 20231:6.12.68-92.122.amzn2023
perf6.12-debuginfoamzn 20231:6.12.68-92.122.amzn2023
python3-perf6.12amzn 20231:6.12.68-92.122.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.68-92.122.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-23003 kernel-64kb: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).8.8 0.0055 None reported
High CVE-2026-23054 kernel-64kb: Security update for the Linux Kernel7.0 0.0021 None reported
High CVE-2026-23001 kernel-64kb: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).7.8 0.0021 None reported
High CVE-2026-23025 kernel-uek: mm/page_alloc: prevent pcp corruption with SMP=n (Vlastimil Babka) [Orabug: 38914772]7.8 0.0021 None reported
High CVE-2026-23050 kernel-64kb: Security update for the Linux Kernel7.0 0.0020 None reported
High CVE-2026-23010 kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).7.8 0.0020 None reported
High CVE-2026-23074 kernel-64kb: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).7.8 0.0019 None reported
High CVE-2026-23002 kernel-64k-debug-modules: kernel: lib/buildid: use __kernel_read() for sleepable context7.0 0.0018 None reported
High CVE-2026-23099 kernel-64kb: bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1257816).7.1 0.0017 None reported
High CVE-2026-23083 kernel-64kb: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).7.8 0.0016 None reported
High CVE-2026-23144 kernel-64kb: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (bsc#1258290).7.3 0.0015 None reported
High CVE-2026-23105 kernel-64kb: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (bsc#1257775).8.8 0.0015 None reported
High CVE-2026-23103 kernel: kernel: ipvlan: Make the addrs_lock be per port8.8 0.0013 None reported
High CVE-2026-23110 kernel-64k: kernel: scsi: core: Wake up the error handler when final completions race against each other7.8 0.0011 None reported
High CVE-2026-23097 kernel-64kb: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).7.5 0.0011 None reported
Routine CVE-2025-68365 kernel-64kb: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).5.5 0.0041 None reported
Routine CVE-2026-23095 kernel-64kb: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808).5.5 0.0031 None reported
Routine CVE-2026-23038 kernel-64kb: Security update for the Linux Kernel5.5 0.0028 None reported
Routine CVE-2026-23035 kernel-64kb: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).5.1 0.0024 None reported
Routine CVE-2026-22999 kernel-64kb: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).5.5 0.0024 None reported
Routine CVE-2026-23032 kernel-uek: null_blk: fix kmemleak by releasing references to fault configfs items (Nilay Shroff) [Orabug: 38914794]4.4 0.0023 None reported
Routine CVE-2025-38591 bpf: Reject narrower access to pointer ctx fields5.5 0.0022 None reported
Routine CVE-2026-23005 kernel-64kb: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245).5.5 0.0022 None reported
Routine CVE-2026-22996 kernel-64kb: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv.5.5 0.0021 None reported
Routine CVE-2026-23011 kernel-64kb: ipv4: ip_gre: make ipgre_header() robust (bsc#1257207).6.6 0.0021 None reported
Showing 1 to 25 of 48 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.