Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-64600: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64531: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.176-223.369 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | perf | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 1:6.1.176-223.369.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 1:6.1.176-223.369.amzn2023 |
Vulnerabilities 2
-
High 7.8CVE-2026-64531 Public exploit
net: openvswitch: reject oversized nested action attrs
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…
-
High 7.8CVE-2026-64600 Public exploit
xfs: resample the data fork mapping after cycling ILOCK
In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, thes…