ALAS2023-2026-2143: CVEs fixed (Amazon Linux)

ALAS2023-2026-2143 fixes 12 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-68388 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated
• CVE-2026-68300 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when
• CVE-2026-68158 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in d
• CVE-2026-68156 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_l
• CVE-2026-68154 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crus
• CVE-2026-68136 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush
• CVE-2026-68127 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pu
• CVE-2026-68123 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation
• CVE-2026-68117 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert
• CVE-2026-74480 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleti
• CVE-2026-72299 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqu
• CVE-2026-72191 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in ind

Applies to

• Amazon Linux 2023

← Back to latest CVEs