Skip to content
OpenAdvisories
High ALAS2023-2026-1864 2 CVEs

Important: kernel6.18 security update (Amazon Linux 2023)

Published Jun 22, 2026 · Updated Jun 22, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46323: In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs CVE-2026-46243: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions

Fixed packages 18

ReleasePackageFixed in
Amazon Linux · 2023 bpftool6.18 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 bpftool6.18-debuginfo 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.18.30-61.119 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel6.18 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-debuginfo 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-debuginfo-common-aarch64 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-debuginfo-common-x86_64 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-devel 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-headers 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-modules-extra 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-modules-extra-common 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-tools 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-tools-debuginfo 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 kernel6.18-tools-devel 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 perf6.18 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 perf6.18-debuginfo 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 python3-perf6.18 1:6.18.30-61.119.amzn2023
Amazon Linux · 2023 python3-perf6.18-debuginfo 1:6.18.30-61.119.amzn2023

Vulnerabilities 2

  • High 7.8
    CVE-2026-46323

    net: gro: don't merge zcopy skbs

    In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the SKBFL_MANAGED_FRAG_REFS…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-46243 Public exploit

    smb: client: reject userspace cifs.spnego descriptions

    In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as ke…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-46243.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-46323.html