ALAS2023-2026-2032: CVEs fixed (Amazon Linux)

ALAS2023-2026-2032 fixes 5 tracked CVEs. Affected systems and fixed versions.

CVE-2026-63808 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in ex
CVE-2026-63809 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl wri
CVE-2026-63823 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in ins
CVE-2026-63824 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_
CVE-2026-63830 CRITICAL 9.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG tr

Applies to