ALAS2023-2026-1681: CVEs fixed (Amazon Linux)

ALAS2023-2026-1681 fixes 5 tracked CVEs. Affected systems and fixed versions.

CVE-2026-43407 CRITICAL 9.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds acce
CVE-2026-43406 CRITICAL 9.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds
CVE-2026-43383 CRITICAL 9.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be con
CVE-2026-31402 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK r
CVE-2026-23455 CRITICAL 9.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for z

Applies to