Amazon Linux 2 : kernel, --advisory ALAS2-2026-3289 (ALAS-2026-3289)

The version of kernel installed on the remote host is prior to 4.14.355-281.727. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3289 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD...

AZL-58890 CVE-2025-21762 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF...

AZL-55851 CVE-2024-57882 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported the following splat: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 1 PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range...