Linux · Amazon Linux · Security advisory · November 7, 2026

ALAS2023-2026-3196: Security update for 18 packages

ALAS2023-2026-3196, released November 7, 2026, fixes 432 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
432
16 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0084
58th percentile

Priority of the 432 CVEs

Patch now 0 Urgent 16 High 293 Routine 123

Fixed package versions

ProductReleaseFixed in
bpftool6.12amzn 20231:6.12.110-135.201.amzn2023
bpftool6.12-debuginfoamzn 20231:6.12.110-135.201.amzn2023
kernel-livepatch-6.12.110-135.201amzn 20231:1.0-0.amzn2023
kernel6.12amzn 20231:6.12.110-135.201.amzn2023
kernel6.12-debuginfoamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-debuginfo-common-aarch64amzn 20231:6.12.110-135.201.amzn2023
kernel6.12-debuginfo-common-x86_64amzn 20231:6.12.110-135.201.amzn2023
kernel6.12-develamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-headersamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-modules-extraamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-modules-extra-commonamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-toolsamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-tools-debuginfoamzn 20231:6.12.110-135.201.amzn2023
kernel6.12-tools-develamzn 20231:6.12.110-135.201.amzn2023
perf6.12amzn 20231:6.12.110-135.201.amzn2023
perf6.12-debuginfoamzn 20231:6.12.110-135.201.amzn2023
python3-perf6.12amzn 20231:6.12.110-135.201.amzn2023
python3-perf6.12-debuginfoamzn 20231:6.12.110-135.201.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-99999 ipv4: validate checksum_start before completing checksum9.3 0.0079 None reported
Urgent CVE-2026-90048 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()9.8 0.0072 None reported
Urgent CVE-2026-89783 xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full9.8 0.0071 None reported
Urgent CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block9.8 0.0070 None reported
Urgent CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit9.8 0.0064 None reported
Urgent CVE-2026-89542 SUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 0.0051 None reported
Urgent CVE-2026-89551 SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 0.0051 None reported
Urgent CVE-2026-89653 ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode9.8 0.0050 None reported
Urgent CVE-2026-89479 sctp: stop processing a packet once its association is deleted9.8 0.0050 None reported
Urgent CVE-2026-93207 SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry9.8 0.0047 None reported
Urgent CVE-2026-64216 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon...9.8 0.0046 None reported
Urgent CVE-2026-68132 super: fix emergency thaw deadlock on frozen block devices9.8 0.0018 None reported
Urgent CVE-2026-80715 igc: remove napi_synchronize() in igc_down()9.8 0.0016 None reported
Urgent CVE-2026-80671 linux: In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy,...9.3 0.0016 None reported
Urgent CVE-2026-64078 netfilter: x_tables: add and use xtables_unregister_table_exit9.8 0.0013 None reported
Urgent CVE-2026-64079 netfilter: x_tables: allocate hook ops while under mutex9.8 0.0012 None reported
High CVE-2026-90011 scsi: target: iscsi: Reserve a terminator byte for the login payload9.8 0.0084 None reported
High CVE-2026-89696 kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)7.5 0.0075 None reported
High CVE-2026-90151 kernel-uek64k-modules-core: NFSv4: remove callback IDR entry on client allocation failure (Ruoyu Wang) [Orabug: 40041662]9.8 0.0075 None reported
High CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE9.8 0.0075 None reported
High CVE-2026-89680 kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)7.5 0.0074 None reported
High CVE-2026-89688 kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0074 None reported
High CVE-2026-74268 tcp: clear sock_ops cb flags before force-closing a child socket9.8 0.0071 None reported
High CVE-2026-80976 kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)9.8 0.0071 None reported
High CVE-2026-89482 nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone9.8 0.0071 None reported
Showing 1 to 25 of 432 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.