Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3146)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3146 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. CVE-2026-80521 Tenable has extracted the preceding description block directly from the tested...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3148)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3148 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. CVE-2026-80521 Tenable has extracted the preceding description block directly from the tested...

slot2

slot2 slot2: a two-stage UEFI GRUB2 bootkit that persists a pre-OS networked implant on Amazon Linux 2023 on AWS EC2 UEFI x8664. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Summary slot2 is a bootkit for Amazon Linux 2023 on EC2. The AWS EC2 UEFI firmware load...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-3144)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3144 advisory. The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocke...

Amazon Linux 2023 : python3-rpm, rpm, rpm-apidocs (ALAS2023-2026-3125)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3125 advisory. A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory. Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to...

Amazon Linux 2023 : environment-modules, environment-modules-compat (ALAS2023-2026-3135)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3135 advisory. modulecomgenwordsandfiles fed untrusted text module names readoff disk, LOADEDMODULES, MODULEPATH straight into compgen -W, whichperforms a full unquoted-word expansion on its wordlist --...

Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2026-3117)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3117 advisory. systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user CVE-2026-16742 Tenable has extracted the preceding description bloc...

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-3137)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3137 advisory. For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow...

Amazon Linux 2023 : libpcap, libpcap-devel (ALAS2023-2026-3100)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3100 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not...

Amazon Linux 2023 : gvfs, gvfs-archive, gvfs-client (ALAS2023-2026-3120)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3120 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3102)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3102 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been...

Important: kernel-livepatch-6.1.176-223.369

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel-livepatch-6.12.94-123.174

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel-livepatch-6.18.39-79.141

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages:...

Important: kernel-livepatch-6.18.38-73.137

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages:...

Important: kernel-livepatch-6.18.48-107.148

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages:...

Important: kernel-livepatch-6.18.36-69.134

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel-livepatch-6.12.94-123.190

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel-livepatch-6.18.35-68.129

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...