ALAS2023-2026-1702: CVEs fixed (Amazon Linux)

ALAS2023-2026-1702 fixes 3 tracked CVEs. Affected systems and fixed versions.

CVE-2026-43304 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_
CVE-2026-43186 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in _
CVE-2026-43208 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu()

Applies to