Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-80844: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left CVE-2026-74469: In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-68121: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header()
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.355-284.746 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.355-284.746.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.355-284.746.amzn2 |
Vulnerabilities 4
-
High 8.8CVE-2026-74469 Public exploit
sctp: prevent peer transport count overflow
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count …
-
High 7.8CVE-2026-68121 Public exploit
pppoe: reload header pointer after dev_hard_header()
In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header(). Device header callbacks are allowed to reallocate th…
-
High 7.8CVE-2026-81000 Public exploit
net: tun: bound receive headroom
In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request fro…
-
Unscored —CVE-2026-80844 Public exploit
xfrm: ah6: validate routing header segments_left
In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger…