Linux · 
Amazon Linux · Security advisory · July 6, 2026
Amazon Linux · Security advisory · July 6, 2026ALAS2023-2026-1925: Security update for 19 packages
ALAS2023-2026-1925, released July 6, 2026, fixes 84 CVEs across 19 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
84
1 rated Critical
Exploited
1
CVE-2026-53266
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0093
61st percentile
Priority of the 84 CVEs
Patch now 1
Urgent 1
High 56
Routine 26
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| bpftool6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel-livepatch-6.18.36-69.134 | amzn 2023 | 1:1.0-0.amzn2023 |
| kernel6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-debuginfo-common-aarch64 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-debuginfo-common-x86_64 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-devel | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-headers | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-modules-extra | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-modules-extra-common | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-tools | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-tools-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| kernel6.18-tools-devel | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| microvm-kernel6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| perf6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| perf6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| python3-perf6.18 | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
| python3-perf6.18-debuginfo | amzn 2023 | 1:6.18.36-69.134.amzn2023 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | KEVExploited |
| Urgent | CVE-2026-53224 | kernel-default: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997). | 9.1 | 0.0057 | None reported |
| High | CVE-2026-52929 | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | None reported |
| High | CVE-2026-52924 | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-53221 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 | None reported |
| High | CVE-2026-53228 | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | None reported |
| High | CVE-2026-53225 | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 | None reported |
| High | CVE-2026-53268 | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 | None reported |
| High | CVE-2026-53183 | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 | None reported |
| High | CVE-2026-53184 | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 | None reported |
| High | CVE-2026-53264 | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 | None reported |
| High | CVE-2026-53229 | kernel-64kb: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691). | 7.5 | 0.0048 | None reported |
| High | CVE-2026-52946 | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 | None reported |
| High | CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | None reported |
| High | CVE-2026-53235 | kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0044 | None reported |
| High | CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | None reported |
| High | CVE-2026-53180 | kernel-64kb: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888). | 7.5 | 0.0034 | None reported |
| High | CVE-2026-53175 | kernel-64kb: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714). | 9.8 | 0.0031 | None reported |
| High | CVE-2026-63867 | kernel-uek64k: mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146] | 8.2 | 0.0027 | None reported |
| High | CVE-2026-53275 | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | None reported |
| High | CVE-2026-53232 | net: phy: clean the sfp upstream if phy probing fails | 8.8 | 0.0026 | None reported |
| High | CVE-2026-46320 | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 | None reported |
| High | CVE-2026-53212 | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 | None reported |
| High | CVE-2026-53191 | kernel-uek64k-modules-wireless: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | None reported |
Showing 1 to 25 of 84
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.