Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53366: In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path CVE-2026-53362: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.12 | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | bpftool6.12-debuginfo | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.12.94-123.176 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.12 | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-aarch64 | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-x86_64 | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-devel | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-headers | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra-common | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-debuginfo | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-devel | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | perf6.12 | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | perf6.12-debuginfo | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12 | 1:6.12.94-123.176.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12-debuginfo | 1:6.12.94-123.176.amzn2023 |
Vulnerabilities 2
-
High 7.8
ipv6: account for fraggap on the paged allocation path
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are com…
KEV Aug 27, 2026 -
High 7.8
ipv4: account for fraggap on the paged allocation path
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + trans…