Skip to content
OpenAdvisories
High ALAS2023-2026-1817 9 CVEs

Important: kernel security update (Amazon Linux 2023)

Published Jun 8, 2026 · Updated Oct 21, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-97555: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite CVE-2026-64379: In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid CVE-2026-46174: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache CVE-2026-43099: In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() CVE-2026-31694: In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache CVE-2026-31624: In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift CVE-2026-31532: In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() CVE-2025-40307: In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap CVE-2025-39901: In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files

Fixed packages 18

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-debuginfo 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-devel 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-headers 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.174-217.345 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-tools 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 kernel-tools-devel 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 perf 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 perf-debuginfo 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 python3-perf 1:6.1.174-217.345.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 1:6.1.174-217.345.amzn2023

Vulnerabilities 9

  • High 8.8
    CVE-2026-46174

    x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache

    In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resources are not improperly shared in the op cache and cause instruction corruption this way.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-97555 Public exploit

    smb: client: fix heap overflow in DACL owner/group rewrite

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite When id_mode_to_cifs_acl rewrites an existing DACL, it allocates a buffer sized according to the on-disk DACL length reported by dac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40307

    exfat: validate cluster allocation bits of the allocation bitmap

    In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-31532

    can: raw: fix ro->uniq use-after-free in raw_rcv()

    In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-31694 Public exploit

    fuse: reject oversized dirents in page cache

    In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2026-43099

    ipv4: icmp: fix null-ptr-deref in icmp_build_probe()

    In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() ipv6_stub->ipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the IPv6 stack is not active (CONFIG_IPV6=m and not loaded), and passing…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2025-39901

    i40e: remove read access to debugfs files

    In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging interface supported by the i40e driver since its early days by commit 02e9c290814…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-64379

    smb: client: mask server-provided mode to 07777 in modefromsid

    In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31624

    HID: core: clamp report_size in s32ton() to avoid undefined shift

    In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift s32ton() shifts by n-1 where n is the field's report_size, a value that comes directly from a HID device. The HID parser boun…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-39901.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40307.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-31532.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-31624.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-31694.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-43099.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-46174.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-64379.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-97555.html