Skip to content
OpenAdvisories
High 1 exploited CVE ALAS2023-2026-1936 2 CVEs

Important: kernel security update (Amazon Linux 2023)

Published Jul 6, 2026 · Updated Jul 29, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53366: In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path CVE-2026-53362: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path

Fixed packages 18

ReleasePackageFixed in
Amazon Linux · 2023 bpftool 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 bpftool-debuginfo 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-debuginfo 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-aarch64 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-debuginfo-common-x86_64 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-devel 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-headers 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.1.176-220.360 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel-modules-extra 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-modules-extra-common 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-tools 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-tools-debuginfo 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 kernel-tools-devel 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 perf 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 perf-debuginfo 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 python3-perf 1:6.1.176-220.360.amzn2023
Amazon Linux · 2023 python3-perf-debuginfo 1:6.1.176-220.360.amzn2023

Vulnerabilities 2

  • High 7.8
    CVE-2026-53362 Exploited Public exploit

    ipv6: account for fraggap on the paged allocation path

    In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are com…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Aug 27, 2026
  • High 7.8
    CVE-2026-53366

    ipv4: account for fraggap on the paged allocation path

    In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + trans…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53362.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53366.html