Linux · 
Amazon Linux · Security advisory · March 16, 2026
Amazon Linux · Security advisory · March 16, 2026ALAS2023-2026-1487: Security update for 22 packages
ALAS2023-2026-1487, released March 16, 2026, fixes 32 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
32
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0113
66th percentile
Priority of the 32 CVEs
Patch now 0
Urgent 0
High 14
Routine 18
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool6.12 | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| bpftool6.12-debuginfo | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel-livepatch-6.12.73-95.123 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel6.12 | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-debuginfo | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-debuginfo-common-aarch64 | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-debuginfo-common-x86_64 | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-devel | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-headers | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-libbpf | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-libbpf-debuginfo | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-libbpf-devel | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-libbpf-static | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-modules-extra | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-modules-extra-common | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-tools | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-tools-debuginfo | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| kernel6.12-tools-devel | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| perf6.12 | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| perf6.12-debuginfo | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| python3-perf6.12 | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
| python3-perf6.12-debuginfo | amzn 2023 | 1:6.12.73-95.123.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-23111 | kernel-64kb: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181). | 7.8 | 0.0113 | None reported |
| High | CVE-2026-23193 | kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414). | 7.8 | 0.0036 | None reported |
| High | CVE-2026-23230 | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 | None reported |
| High | CVE-2026-23214 | btrfs: reject new transactions if the fs is fully read-only | 8.4 | 0.0018 | None reported |
| High | CVE-2026-23209 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | None reported |
| High | CVE-2026-23204 | kernel-64kb: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340). | 8.1 | 0.0016 | None reported |
| High | CVE-2026-23156 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | None reported |
| High | CVE-2026-23224 | erofs: fix UAF issue for file-backed mounts w/ directio option | 7.8 | 0.0014 | None reported |
| High | CVE-2026-23216 | scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() | 8.8 | 0.0014 | None reported |
| High | CVE-2026-23223 | xfs: fix UAF in xchk_btree_check_block_owner | 7.8 | 0.0014 | None reported |
| High | CVE-2026-23168 | kernel: In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq... | 7.8 | 0.0014 | None reported |
| High | CVE-2026-23215 | x86/vmware: Fix hypercall clobbers | 8.4 | 0.0013 | None reported |
| High | CVE-2026-23161 | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0011 | None reported |
| High | CVE-2026-31688 | driver core: enforce device_lock for driver_match_device() | 7.8 | n/a | None reported |
| Routine | CVE-2025-71268 | kernel-livepatch-SLE15-SP7-RT_Update_11: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865). | 5.5 | 0.0033 | None reported |
| Routine | CVE-2026-23177 | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0020 | None reported |
| Routine | CVE-2026-23154 | kernel-64kb: net: fix segmentation of forwarding fraglist GRO (bsc#1258286). | 5.5 | 0.0018 | None reported |
| Routine | CVE-2026-23198 | kernel-64kb: KVM: Don't clobber irqfd routing type when deassigning irqfd (bsc#1258321). | 5.5 | 0.0015 | None reported |
| Routine | CVE-2026-23169 | kernel-64kb: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389). | 5.6 | 0.0014 | None reported |
| Routine | CVE-2026-23159 | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.1 | 0.0014 | None reported |
| Routine | CVE-2026-23173 | kernel-64kb: net/mlx5e: TC, delete flows only for existing peers (bsc#1258520). | 5.5 | 0.0014 | None reported |
| Routine | CVE-2026-23200 | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 | None reported |
| Routine | CVE-2026-23189 | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 | None reported |
| Routine | CVE-2026-23201 | cephfs: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337). | 5.5 | 0.0014 | None reported |
| Routine | CVE-2026-23205 | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 | None reported |
Showing 1 to 25 of 32
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.