Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46333: In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic CVE-2026-43494: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails CVE-2026-31449: In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.172-216.329 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | perf | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 1:6.1.172-216.329.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 1:6.1.172-216.329.amzn2023 |
Vulnerabilities 3
-
High 7.8
ext4: validate p_idx bounds in ext4_ext_correct_indexes
In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes ext4_ext_correct_indexes() walks up the extent tree correcting index entries when the first extent in a leaf is modified. Before access…
-
High 7.8CVE-2026-43494 Public exploit
net/rds: reset op_nents when zerocopy page pin fails
In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znot…
-
High 7.1CVE-2026-46333 Public exploit
ptrace: slightly saner 'get_dumpable()' logic
In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and ma…