Linux · 
Amazon Linux · Security advisory · June 22, 2026
Amazon Linux · Security advisory · June 22, 2026ALAS2023-2026-1882: Security update for 18 packages
ALAS2023-2026-1882, released June 22, 2026, fixes 166 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
166
10 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0537
92nd percentile
Priority of the 166 CVEs
Patch now 0
Urgent 10
High 107
Routine 49
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| bpftool-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-debuginfo-common-aarch64 | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-debuginfo-common-x86_64 | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-devel | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-headers | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-livepatch-6.1.175-219.357 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel-modules-extra | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-modules-extra-common | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-tools | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-tools-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| kernel-tools-devel | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| perf | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| perf-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| python3-perf | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| python3-perf-debuginfo | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-64046 | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-64047 | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-52955 | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| Urgent | CVE-2026-64106 | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 | None reported |
| Urgent | CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2026-53077 | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | None reported |
| Urgent | CVE-2026-53062 | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | None reported |
| High | CVE-2026-43499 | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 | None reported |
| High | CVE-2026-46242 | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 | None reported |
| High | CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | None reported |
| High | CVE-2026-53003 | pppoe: drop PFC frames | 7.5 | 0.0072 | None reported |
| High | CVE-2026-43493 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | None reported |
| High | CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | None reported |
| High | CVE-2026-43083 | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | None reported |
| High | CVE-2026-52999 | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | None reported |
| High | CVE-2026-52998 | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | None reported |
| High | CVE-2026-46102 | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 | None reported |
| High | CVE-2026-52981 | kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254). | 7.5 | 0.0053 | None reported |
| High | CVE-2026-64113 | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 | None reported |
| High | CVE-2026-46119 | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 | None reported |
| High | CVE-2026-46185 | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 | None reported |
| High | CVE-2026-52954 | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | None reported |
Showing 1 to 25 of 166
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.