ALAS2023-2026-2057: CVEs fixed (Amazon Linux)

ALAS2023-2026-2057 fixes 5 tracked CVEs. Affected systems and fixed versions.

CVE-2026-64387 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay d
CVE-2026-64386 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info() replay doub
CVE-2026-64385 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_ioct
CVE-2026-64384 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay dou
CVE-2026-64383 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flus

Applies to