ALAS2023-2026-2110: CVEs fixed (Amazon Linux)

ALAS2023-2026-2110 fixes 4 tracked CVEs. Affected systems and fixed versions.

CVE-2026-68161 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during net
CVE-2026-68160 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on
CVE-2026-64564 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transpo
CVE-2026-72137 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on

Applies to