Skip to content
OpenAdvisories
High ALAS2023-2026-3103 9 CVEs

Important: kernel6.12 security update (Amazon Linux 2023)

Published Sep 18, 2026 · Updated Sep 28, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-80844: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left CVE-2026-74405: In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup CVE-2026-74347: In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount CVE-2026-72413: In the Linux kernel, the following vulnerability has been resolved: sctp: fix err_chunk memory leaks in INIT handling CVE-2026-72398: In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking CVE-2026-72288: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-64068: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs CVE-2026-64058: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback

Fixed packages 18

ReleasePackageFixed in
Amazon Linux · 2023 bpftool6.12 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 bpftool6.12-debuginfo 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel-livepatch-6.12.103-129.197 1:1.0-0.amzn2023
Amazon Linux · 2023 kernel6.12 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-aarch64 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-debuginfo-common-x86_64 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-devel 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-headers 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-modules-extra-common 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-tools 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-tools-debuginfo 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 kernel6.12-tools-devel 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 perf6.12 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 perf6.12-debuginfo 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 python3-perf6.12 1:6.12.103-129.197.amzn2023
Amazon Linux · 2023 python3-perf6.12-debuginfo 1:6.12.103-129.197.amzn2023

Vulnerabilities 9

  • Critical 9.8
    CVE-2026-64068

    netfs: Fix missing locking around retry adding new subreqs

    In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into st…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-72398

    sctp: add INIT verification after cookie unpacking

    In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then ret…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.3
    CVE-2026-72288

    KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim reports some really bad races should the following situation occur: - LPI-I is pending in vcpu-B'…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-64058

    netfs: Fix netfs_read_folio() to wait on writeback

    In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback Fix netfs_read_folio() to wait for an ongoing writeback to complete so that it can trust the dirty flag and whatever is attached to folio->p…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-74347

    netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount

    In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nf_ct_timeout which is used by ct extension to set the custom ct timeout policy, this te…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-74405

    OPP: Fix race between OPP addition and lookup

    In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between dev_pm_opp_add_dynamic() and dev_pm_opp_find_freq_exact(): CPU0 (add) CPU1 (lookup) ------------------------------- -------…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-81000 Public exploit

    net: tun: bound receive headroom

    In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request fro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-72413

    sctp: fix err_chunk memory leaks in INIT handling

    In the Linux kernel, the following vulnerability has been resolved: sctp: fix err_chunk memory leaks in INIT handling When sctp_verify_init() encounters unrecognized parameters, it allocates an err_chunk to report them. However, this chunk is leaked in severa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80844 Public exploit

    xfrm: ah6: validate routing header segments_left

    In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-64058.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-64068.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-72288.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-72398.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-72413.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-74347.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-74405.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-80844.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-81000.html