Linux · Amazon Linux · Security advisory · May 25, 2026

ALAS2023-2026-1746: Security update for 18 packages

ALAS2023-2026-1746, released May 25, 2026, fixes 128 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
128
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0069
53rd percentile

Priority of the 128 CVEs

Patch now 0 Urgent 1 High 75 Routine 52

Fixed package versions

ProductReleaseFixed in
bpftool6.18amzn 20231:6.18.25-52.107.amzn2023
bpftool6.18-debuginfoamzn 20231:6.18.25-52.107.amzn2023
kernel-livepatch-6.18.25-52.107amzn 20231:1.0-0.amzn2023
kernel6.18amzn 20231:6.18.25-52.107.amzn2023
kernel6.18-debuginfoamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-debuginfo-common-aarch64amzn 20231:6.18.25-52.107.amzn2023
kernel6.18-debuginfo-common-x86_64amzn 20231:6.18.25-52.107.amzn2023
kernel6.18-develamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-headersamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-modules-extraamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-modules-extra-commonamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-toolsamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-tools-debuginfoamzn 20231:6.18.25-52.107.amzn2023
kernel6.18-tools-develamzn 20231:6.18.25-52.107.amzn2023
perf6.18amzn 20231:6.18.25-52.107.amzn2023
perf6.18-debuginfoamzn 20231:6.18.25-52.107.amzn2023
python3-perf6.18amzn 20231:6.18.25-52.107.amzn2023
python3-perf6.18-debuginfoamzn 20231:6.18.25-52.107.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-43067 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for block...9.8 0.0050 None reported
High CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 0.0069 None reported
High CVE-2026-31682 bridge: br_nd_send: linearize skb before parsing ND options9.1 0.0064 None reported
High CVE-2026-31414 netfilter: nf_conntrack_expect: use expect->helper9.8 0.0058 None reported
High CVE-2026-43341 kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).9.8 0.0051 None reported
High CVE-2026-31448 ext4: avoid infinite loops caused by residual data9.4 0.0050 None reported
High CVE-2026-31609 smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()9.8 0.0046 None reported
High CVE-2026-43057 kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056).7.5 0.0044 None reported
High CVE-2026-43336 kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).7.5 0.0043 None reported
High CVE-2026-31450 ext4: publish jinode after initialization8.8 0.0041 None reported
High CVE-2026-31467 erofs: add GFP_NOIO in the bio completion if needed8.8 0.0038 None reported
High CVE-2026-43055 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd...7.5 0.0036 None reported
High CVE-2026-31435 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under...8.8 0.0034 None reported
High CVE-2026-43029 mptcp: fix soft lockup in mptcp_recvmsg()7.5 0.0033 None reported
High CVE-2026-43048 HID: core: Mitigate potential OOB by removing bogus memset()8.8 0.0032 None reported
High CVE-2026-31570 can: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 0.0026 None reported
High CVE-2026-43038 kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 0.0026 None reported
High CVE-2026-31413 kernel-uek: ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT)7.8 0.0023 None reported
High CVE-2026-31554 kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)7.8 0.0021 None reported
High CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE8.8 0.0019 None reported
High CVE-2026-43329 kernel-64kb: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).7.8 0.0018 None reported
High CVE-2026-23415 kernel: kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()7.8 0.0017 None reported
High CVE-2026-31674 netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()7.1 0.0017 None reported
High CVE-2026-31675 net/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 0.0016 None reported
High CVE-2026-31680 net: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 0.0016 None reported
Showing 1 to 25 of 128 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.