Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-80844: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.18 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | bpftool6.18-debuginfo | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.18.48-109.150 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.18 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo-common-aarch64 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-debuginfo-common-x86_64 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-devel | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-headers | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-modules-extra | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-modules-extra-common | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools-debuginfo | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | kernel6.18-tools-devel | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | microvm-kernel6.18 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | perf6.18 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | perf6.18-debuginfo | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.18 | 1:6.18.48-109.150.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.18-debuginfo | 1:6.18.48-109.150.amzn2023 |
Vulnerabilities 2
-
High 7.8CVE-2026-81000 Public exploit
net: tun: bound receive headroom
In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request fro…
-
Unscored —CVE-2026-80844 Public exploit
xfrm: ah6: validate routing header segments_left
In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger…