Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-64600: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64531: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.18 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | bpftool6.18-debuginfo | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.18.38-76.139 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.18 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo-common-aarch64 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo-common-x86_64 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-devel | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-headers | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-modules-extra | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-modules-extra-common | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools-debuginfo | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools-devel | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | microvm-kernel6.18 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | perf6.18 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | perf6.18-debuginfo | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.18 | 1:6.18.38-76.139.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.18-debuginfo | 1:6.18.38-76.139.amzn2023 |
Vulnerabilities 2
-
High 7.8CVE-2026-64531 Public exploit
net: openvswitch: reject oversized nested action attrs
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…
-
High 7.8CVE-2026-64600 Public exploit
xfs: resample the data fork mapping after cycling ILOCK
In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, thes…