Linux · Amazon Linux · Security advisory · March 2, 2026

ALAS2023-2026-1468: Security update for 22 packages

ALAS2023-2026-1468, released March 2, 2026, fixes 52 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
52
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0113
66th percentile

Priority of the 52 CVEs

Patch now 0 Urgent 0 High 25 Routine 27

Fixed package versions

ProductReleaseFixed in
bpftoolamzn 20231:6.1.163-186.299.amzn2023
bpftool-debuginfoamzn 20231:6.1.163-186.299.amzn2023
kernelamzn 20231:6.1.163-186.299.amzn2023
kernel-debuginfoamzn 20231:6.1.163-186.299.amzn2023
kernel-debuginfo-common-aarch64amzn 20231:6.1.163-186.299.amzn2023
kernel-debuginfo-common-x86_64amzn 20231:6.1.163-186.299.amzn2023
kernel-develamzn 20231:6.1.163-186.299.amzn2023
kernel-headersamzn 20231:6.1.163-186.299.amzn2023
kernel-libbpfamzn 20231:6.1.163-186.299.amzn2023
kernel-libbpf-debuginfoamzn 20231:6.1.163-186.299.amzn2023
kernel-libbpf-develamzn 20231:6.1.163-186.299.amzn2023
kernel-libbpf-staticamzn 20231:6.1.163-186.299.amzn2023
kernel-livepatch-6.1.163-186.299amzn 20231:1.0-0.amzn2023
kernel-modules-extraamzn 20231:6.1.163-186.299.amzn2023
kernel-modules-extra-commonamzn 20231:6.1.163-186.299.amzn2023
kernel-toolsamzn 20231:6.1.163-186.299.amzn2023
kernel-tools-debuginfoamzn 20231:6.1.163-186.299.amzn2023
kernel-tools-develamzn 20231:6.1.163-186.299.amzn2023
perfamzn 20231:6.1.163-186.299.amzn2023
perf-debuginfoamzn 20231:6.1.163-186.299.amzn2023
python3-perfamzn 20231:6.1.163-186.299.amzn2023
python3-perf-debuginfoamzn 20231:6.1.163-186.299.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-23111 kernel-64kb: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181).7.8 0.0113 None reported
High CVE-2026-23003 kernel-64kb: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).8.8 0.0055 None reported
High CVE-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid()8.8 0.0049 None reported
High CVE-2026-23193 kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).7.8 0.0036 None reported
High CVE-2026-23054 kernel-64kb: Security update for the Linux Kernel7.0 0.0021 None reported
High CVE-2026-23001 kernel-64kb: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).7.8 0.0021 None reported
High CVE-2026-23025 kernel-uek: mm/page_alloc: prevent pcp corruption with SMP=n (Vlastimil Babka) [Orabug: 38914772]7.8 0.0021 None reported
High CVE-2026-23010 kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).7.8 0.0020 None reported
High CVE-2026-23074 kernel-64kb: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).7.8 0.0019 None reported
High CVE-2023-54285 kernel-livepatch-SLE15-SP7-RT_Update_8: Security update for the Linux Kernel7.8 0.0018 None reported
High CVE-2026-23209 kernel-64kb: Security update for the Linux Kernel7.8 0.0017 None reported
High CVE-2026-23099 kernel-64kb: bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1257816).7.1 0.0017 None reported
High CVE-2025-38718 sctp: linearize cloned gso packets in sctp_rcv7.8 0.0017 None reported
High CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set7.8 0.0016 None reported
High CVE-2026-23083 kernel-64kb: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).7.8 0.0016 None reported
High CVE-2025-68340 kernel-64kb: team: Move team device type change at the end of team_port_add (bsc#1255507).7.0 0.0015 None reported
High CVE-2026-23144 kernel-64kb: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (bsc#1258290).7.3 0.0015 None reported
High CVE-2026-23105 kernel-64kb: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (bsc#1257775).8.8 0.0015 None reported
High CVE-2026-23156 kernel-64kb: Security update for the Linux Kernel7.8 0.0014 None reported
High CVE-2026-23216 scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()8.8 0.0014 None reported
High CVE-2026-23102 kernel-64kb: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772).7.1 0.0014 None reported
High CVE-2026-23168 kernel: In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq...7.8 0.0014 None reported
High CVE-2026-23103 kernel: kernel: ipvlan: Make the addrs_lock be per port8.8 0.0013 None reported
High CVE-2026-23110 kernel-64k: kernel: scsi: core: Wake up the error handler when final completions race against each other7.8 0.0011 None reported
High CVE-2026-23097 kernel-64kb: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).7.5 0.0011 None reported
Showing 1 to 25 of 52 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.