Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-52945: In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" CVE-2026-23390: In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow CVE-2026-23221: In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix use-after-free in driver_override_show() The driver_override_show() function reads the driver_override string without holding the device_lock. However, driver_override_store() uses driver_set_override(), which modifies and frees the string while holding the device_lock. This can result in a concurrent use-after-free if the string is freed by the store function while being read by the show function. Fix this by holding the device_lock around the read operation. CVE-2026-23100: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared()
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.12 | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | bpftool6.12-debuginfo | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.12.74-98.124 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.12 | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-aarch64 | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-x86_64 | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-devel | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-headers | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-debuginfo | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-devel | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-libbpf-static | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra-common | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-debuginfo | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-devel | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | perf6.12 | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | perf6.12-debuginfo | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12 | 1:6.12.74-98.124.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12-debuginfo | 1:6.12.74-98.124.amzn2023 |
Vulnerabilities 4
-
High 7.5
Revert "wireguard: device: enable threaded NAPI"
In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e upstream. We have had th…
-
Unscored —
mm/hugetlb: fix hugetlb_pmd_shared()
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series "mm/hugetlb: fixes for PMD table sharing (incl. using mmu_gather)", v3. One functional fix, one performance regression fix, and two related c…
-
Unscored —
bus: fsl-mc: fix use-after-free in driver_override_show()
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix use-after-free in driver_override_show() The driver_override_show() function reads the driver_override string without holding the device_lock. However, driver_override_store(…
-
Unscored —
tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow The dma_map_sg tracepoint can trigger a perf buffer overflow when tracing large scatter-gather lists. With devices lik…