ALAS2023-2026-1746: CVEs fixed (Amazon Linux)

ALAS2023-2026-1746 fixes 7 tracked CVEs. Affected systems and fixed versions.

CVE-2026-43341 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wr
CVE-2026-43067 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching fo
CVE-2026-43037 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_er
CVE-2026-31682 CRITICAL 9.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before
CVE-2026-31609 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_fr
CVE-2026-31448 CRITICAL 9.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by resi
CVE-2026-31414 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expec

Applies to