Skip to content
OpenAdvisories
High ALAS2023-2026-1970 5 CVEs

Important: kernel6.12 security update (Amazon Linux 2023)

Published Jul 20, 2026 · Updated Aug 12, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53359: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role CVE-2026-53250: In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() CVE-2026-53092: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg CVE-2026-53078: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops CVE-2026-46324: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks

Fixed packages 18

ReleasePackageFixed in
Amazon Linux · 2023 bpftool6.12 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 bpftool6.12-debuginfo 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.12.94-123.190 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel6.12 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-aarch64 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-x86_64 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-devel 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-headers 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra-common 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-tools 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-tools-debuginfo 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 kernel6.12-tools-devel 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 perf6.12 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 perf6.12-debuginfo 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 python3-perf6.12 1:6.12.94-123.190.amzn2023
Amazon Linux · 2023 python3-perf6.12-debuginfo 1:6.12.94-123.190.amzn2023

Vulnerabilities 5

  • High 8.8
    CVE-2026-53359 Public exploit

    KVM: x86: Fix shadow paging use-after-free due to unexpected role

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch betw…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-46324

    netfilter: nf_tables: use list_del_rcu for netlink hooks

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can be walked by concurrent…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-53078

    bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops When a BPF sock_ops program accesses ctx fields with dst_reg == src_reg, the SOCK_OPS_GET_SK() and SOCK_OPS_GET_FIELD() ma…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-53092

    bpf: Fix linked reg delta tracking when src_reg == dst_reg

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the case of rX += rX where src_reg and dst_reg are pointers to the same bpf_reg_state in adjust_reg_min_max_vals(). The lat…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-53250

    xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()

    In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() The TX metadata area resides in the UMEM buffer which is memory-mapped and concurrently writable by userspace. In xsk_skb…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-46324.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53078.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53092.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53250.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53359.html