ALAS2023-2026-3197: CVEs fixed (Amazon Linux)

ALAS2023-2026-3197 fixes 15 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-99999 CRITICAL 9.3 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before comp
• CVE-2026-90011 CRITICAL 9.1 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator
• CVE-2026-89783 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_i
• CVE-2026-89778 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array acces
• CVE-2026-89712 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk afte
• CVE-2026-89669 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid befo
• CVE-2026-89662 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free d
• CVE-2026-89655 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() o
• CVE-2026-89643 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fs
• CVE-2026-89636 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tg
• CVE-2026-89555 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull()
• CVE-2026-89538 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with o
• CVE-2026-89485 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_f
• CVE-2026-89482 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on
• CVE-2026-80976 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulatio

Applies to

• Amazon Linux 2023

← Back to latest CVEs