Linux · Amazon Linux · Security advisory · June 22, 2026

ALAS2023-2026-1881: Security update for 19 packages

ALAS2023-2026-1881, released June 22, 2026, fixes 164 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
164
14 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0097
62nd percentile

Priority of the 164 CVEs

Patch now 0 Urgent 14 High 106 Routine 44

Fixed package versions

ProductReleaseFixed in
bpftool6.18amzn 20231:6.18.35-68.127.amzn2023
bpftool6.18-debuginfoamzn 20231:6.18.35-68.127.amzn2023
kernel-livepatch-6.18.35-68.127amzn 20231:1.0-0.amzn2023
kernel6.18amzn 20231:6.18.35-68.127.amzn2023
kernel6.18-debuginfoamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-debuginfo-common-aarch64amzn 20231:6.18.35-68.127.amzn2023
kernel6.18-debuginfo-common-x86_64amzn 20231:6.18.35-68.127.amzn2023
kernel6.18-develamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-headersamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-modules-extraamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-modules-extra-commonamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-toolsamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-tools-debuginfoamzn 20231:6.18.35-68.127.amzn2023
kernel6.18-tools-develamzn 20231:6.18.35-68.127.amzn2023
microvm-kernel6.18amzn 20231:6.18.35-68.127.amzn2023
perf6.18amzn 20231:6.18.35-68.127.amzn2023
perf6.18-debuginfoamzn 20231:6.18.35-68.127.amzn2023
python3-perf6.18amzn 20231:6.18.35-68.127.amzn2023
python3-perf6.18-debuginfoamzn 20231:6.18.35-68.127.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-64066 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on...9.8 0.0065 None reported
Urgent CVE-2026-64069 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read...9.8 0.0065 None reported
Urgent CVE-2026-64150 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before...9.8 0.0065 None reported
Urgent CVE-2026-64046 kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).9.8 0.0051 None reported
Urgent CVE-2026-64047 kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).9.8 0.0051 None reported
Urgent CVE-2026-64061 kernel-64kb: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).9.8 0.0047 None reported
Urgent CVE-2026-64216 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon...9.8 0.0046 None reported
Urgent CVE-2026-64232 linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in...9.8 0.0043 None reported
Urgent CVE-2026-64025 kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).9.8 0.0037 None reported
Urgent CVE-2026-64080 linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks u...9.3 0.0020 None reported
Urgent CVE-2026-64106 kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).9.0 0.0015 None reported
Urgent CVE-2026-64076 netfilter: bridge: eb_tables: close module init race9.8 0.0014 None reported
Urgent CVE-2026-64078 netfilter: x_tables: add and use xtables_unregister_table_exit9.8 0.0013 None reported
Urgent CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure9.8 0.0012 None reported
High CVE-2026-63913 kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.8 0.0097 None reported
High CVE-2026-63887 kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp...9.8 0.0078 None reported
High CVE-2026-63888 kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-...9.8 0.0078 None reported
High CVE-2026-63912 kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836).9.8 0.0071 None reported
High CVE-2026-63922 kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option9.8 0.0071 None reported
High CVE-2026-63924 kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 0.0071 None reported
High CVE-2026-63886 kernel-default: Security update for the Linux Kernel9.8 0.0071 None reported
High CVE-2026-63968 kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).7.5 0.0067 None reported
High CVE-2026-63919 kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).8.8 0.0065 None reported
High CVE-2026-64122 kernel-uek64k-modules-core: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover (Matt Fleming) [Orabug: 39203117,39870622]9.8 0.0063 None reported
High CVE-2026-52932 linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp er...7.5 0.0061 None reported
Showing 1 to 25 of 164 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.