Skip to content
OpenAdvisories
Medium ALAS2023-2026-1515 8 CVEs

Moderate: kernel6.18 security update (Amazon Linux 2023)

Published Mar 30, 2026 · Updated May 8, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23249: In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees CVE-2026-23241: In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class CVE-2026-23240: In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() CVE-2026-23239: In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() CVE-2025-71267: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST CVE-2025-71266: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop CVE-2025-71265: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata CVE-2025-71239: In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class

Fixed packages 22

ReleasePackageFixed in
Amazon Linux · 2023 bpftool6.18 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 bpftool6.18-debuginfo 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.18.16-18.222 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel6.18 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-debuginfo 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-debuginfo-common-aarch64 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-debuginfo-common-x86_64 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-devel 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-headers 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-libbpf 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-libbpf-debuginfo 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-libbpf-devel 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-libbpf-static 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-modules-extra 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-modules-extra-common 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-tools 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-tools-debuginfo 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 kernel6.18-tools-devel 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 perf6.18 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 perf6.18-debuginfo 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 python3-perf6.18 1:6.18.16-18.222.amzn2023
Amazon Linux · 2023 python3-perf6.18-debuginfo 1:6.18.16-18.222.amzn2023

Vulnerabilities 8

  • Critical 9.8
    CVE-2026-23240

    tls: Fix race condition in tls_sw_cancel_work_tx()

    In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23239

    espintcp: Fix race condition in espintcp_close()

    In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() This issue was discovered during a code audit. After cancel_work_sync() is called from espintcp_close(), espintcp_tx_work() can still be sched…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-71239

    audit: add fchmodat2() to change attributes class

    In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is currently not in the change attribute class of audit. Calling fchmodat2() to change a file attribut…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-71265

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A ma…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-71266

    fs: ntfs3: check return value of indx_find to avoid infinite loop

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A malformed dent…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-71267

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A malformed NTFS im…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23241

    audit: add missing syscalls to read class

    In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing from the audit read class. Calling getxattrat() or listxattrat() on a file to read its ext…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-23249

    xfs: check for deleted cursors when revalidating two btrees

    In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees The free space and inode btree repair functions will rebuild both btrees at the same time, after which it needs to evaluate both bt…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-71239.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-71265.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-71266.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-71267.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-23239.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-23240.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-23241.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-23249.html