Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-80844: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.186-228.376 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | perf | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 1:6.1.186-228.376.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 1:6.1.186-228.376.amzn2023 |
Vulnerabilities 2
-
High 7.8CVE-2026-81000 Public exploit
net: tun: bound receive headroom
In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request fro…
-
Unscored —CVE-2026-80844 Public exploit
xfrm: ah6: validate routing header segments_left
In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger…