Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53366: In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path CVE-2026-53362: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.18 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | bpftool6.18-debuginfo | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.18.36-69.136 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.18 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo-common-aarch64 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo-common-x86_64 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-devel | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-headers | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-modules-extra | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-modules-extra-common | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools-debuginfo | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools-devel | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | microvm-kernel6.18 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | perf6.18 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | perf6.18-debuginfo | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.18 | 1:6.18.36-69.136.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.18-debuginfo | 1:6.18.36-69.136.amzn2023 |
Vulnerabilities 2
-
High 7.8
ipv6: account for fraggap on the paged allocation path
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are com…
KEV Aug 27, 2026 -
High 7.8
ipv4: account for fraggap on the paged allocation path
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + trans…