Linux · Amazon Linux · Security advisory · August 17, 2026

ALAS2023-2026-2057: Security update for 18 packages

ALAS2023-2026-2057, released August 17, 2026, fixes 315 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
315
7 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0080
56th percentile

Priority of the 315 CVEs

Patch now 0 Urgent 7 High 242 Routine 66

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.100-125.179.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.100-125.179.amzn2023
kernel-livepatch-6.12.100-125.179amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.100-125.179.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.100-125.179.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.100-125.179.amzn2023
kernel6.12-develamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-headersamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-toolsamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.100-125.179.amzn2023
kernel6.12-tools-develamzn 20231:6.12.100-125.179.amzn2023
perf6.12amzn 20231:6.12.100-125.179.amzn2023
perf6.12-debuginfoamzn 20231:6.12.100-125.179.amzn2023
python3-perf6.12amzn 20231:6.12.100-125.179.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.100-125.179.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-72194 linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to...9.8 0.0080 None reported
Urgent CVE-2026-72192 linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root be...9.8 0.0074 None reported
Urgent CVE-2026-72296 linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...9.1 0.0074 None reported
Urgent CVE-2026-72041 linux: In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial...9.8 0.0071 None reported
Urgent CVE-2026-72191 linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_inser...9.8 0.0070 None reported
Urgent CVE-2026-80637 netfilter: synproxy: fix unaligned memory access in timestamp adjustment9.8 0.0059 None reported
Urgent CVE-2026-64551 linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...9.1 0.0051 None reported
High CVE-2026-80630 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0076 None reported
High CVE-2026-72084 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0075 None reported
High CVE-2026-72319 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0075 None reported
High CVE-2026-72351 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0075 None reported
High CVE-2026-72466 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0074 None reported
High CVE-2026-72083 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0072 None reported
High CVE-2026-72322 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0072 None reported
High CVE-2026-72323 bpftool: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (Eric Dumazet) [Orabug: 39885781]9.8 0.0072 None reported
High CVE-2026-72014 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0072 None reported
High CVE-2026-72418 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)7.5 0.0072 None reported
High CVE-2026-72502 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)7.5 0.0072 None reported
High CVE-2026-74321 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)7.5 0.0072 None reported
High CVE-2026-80646 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)7.5 0.0072 None reported
High CVE-2026-68476 bpftool: ipvs: reload ip header after head reallocation (Florian Westphal) [Orabug: 39884703]9.8 0.0071 None reported
High CVE-2026-68477 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0071 None reported
High CVE-2026-72020 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0071 None reported
High CVE-2026-72251 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0071 None reported
High CVE-2026-74267 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0071 None reported
Showing 1 to 25 of 315 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.