Linux · Amazon Linux · Security advisory · March 30, 2026

ALAS2023-2026-1514: Security update for 22 packages

ALAS2023-2026-1514, released March 30, 2026, fixes 82 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
82
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0075
55th percentile

Priority of the 82 CVEs

Patch now 0 Urgent 2 High 31 Routine 49

Fixed package versions

ProductReleaseFixed in
bpftool6.18amzn 20231:6.18.15-14.217.amzn2023
bpftool6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel-livepatch-6.18.15-14.217amzn 20231:1.0-0.amzn2023
kernel6.18amzn 20231:6.18.15-14.217.amzn2023
kernel6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-debuginfo-common-aarch64amzn 20231:6.18.15-14.217.amzn2023
kernel6.18-debuginfo-common-x86_64amzn 20231:6.18.15-14.217.amzn2023
kernel6.18-develamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-headersamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpfamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpf-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpf-develamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-libbpf-staticamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-modules-extraamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-modules-extra-commonamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-toolsamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-tools-debuginfoamzn 20231:6.18.15-14.217.amzn2023
kernel6.18-tools-develamzn 20231:6.18.15-14.217.amzn2023
perf6.18amzn 20231:6.18.15-14.217.amzn2023
perf6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023
python3-perf6.18amzn 20231:6.18.15-14.217.amzn2023
python3-perf6.18-debuginfoamzn 20231:6.18.15-14.217.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-46266 kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).9.1 0.0047 None reported
Urgent CVE-2026-45899 ext4: drop extent cache when splitting extent fails9.8 0.0016 None reported
High CVE-2026-45860 kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).7.5 0.0075 None reported
High CVE-2026-45859 netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation8.1 0.0071 None reported
High CVE-2026-45898 kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888).9.8 0.0053 None reported
High CVE-2026-31539 kernel: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_i...8.8 0.0033 None reported
High CVE-2026-45933 kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)7.8 0.0020 None reported
High CVE-2026-45856 kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720).8.8 0.0019 None reported
High CVE-2026-23243 RDMA/umad: Reject negative data_len in ib_umad_write7.8 0.0018 None reported
High CVE-2026-46253 kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).7.8 0.0017 None reported
High CVE-2026-45932 bpf: Fix tcx/netkit detach permissions when prog fd isn't given7.3 0.0017 None reported
High CVE-2026-45851 kernel-64kb: Security update for the Linux Kernel7.1 0.0016 None reported
High CVE-2026-45886 kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810).7.0 0.0016 None reported
High CVE-2026-45943 erofs: fix inline data read failure for ztailpacking pclusters7.1 0.0016 None reported
High CVE-2026-45903 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototype...7.1 0.0016 None reported
High CVE-2026-45935 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteI...7.8 0.0015 None reported
High CVE-2026-45920 kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).7.8 0.0015 None reported
High CVE-2026-23390 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow7.8 0.0014 None reported
High CVE-2026-46251 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruptio...8.4 0.0013 None reported
High CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry8.8 0.0013 None reported
High CVE-2026-45862 kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705).7.8 0.0013 None reported
High CVE-2026-45942 ext4: fix e4b bitmap inconsistency reports8.8 0.0013 None reported
High CVE-2026-45970 kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).8.8 0.0013 None reported
High CVE-2026-45957 kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)7.1 0.0013 None reported
High CVE-2026-45951 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free of BTF objec...7.8 0.0012 None reported
Showing 1 to 25 of 82 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.