Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3251)

critical Nessus Plugin ID 371850

Language:

Synopsis

The remote Amazon Linux 2023 host is missing a security update.

Description

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3251 advisory.

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix UAF in sock clone early bailouts (CVE-2026-68399)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: initialize inode mapping flags for cached inodes (CVE-2026-80734)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Mark NULL kptr stores precise (CVE-2026-98034)

In the Linux kernel, the following vulnerability has been resolved:

bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks (CVE-2026-98084)

In the Linux kernel, the following vulnerability has been resolved:

xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: preserve mremap address delta when skipping page tables (CVE-2026-98373)

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (CVE-2026-98374)

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: drop RX packets with a short Ethernet header (CVE-2026-98375)

In the Linux kernel, the following vulnerability has been resolved:

vlan: require the MAC header to be present in __vlan_insert_inner_tag() (CVE-2026-98377)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Skip unsettled links in link iterator (CVE-2026-98378)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ip6t_rpfilter: reject routes without inet6_dev (CVE-2026-98379)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: reject IDR error pointers when deleting actions (CVE-2026-98380)

In the Linux kernel, the following vulnerability has been resolved:

veth: manage XDP program pointers during channel resize (CVE-2026-98381)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Reject dev-bound-only programs on other devices (CVE-2026-98382)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL (CVE-2026-98383)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() (CVE-2026-98384)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction (CVE-2026-98440)

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix cursor and pointer handling when recovering iunlink buckets (CVE-2026-98443)

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't let hidden_space go negative in xfs_metafile_resv_init (CVE-2026-98446)

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots (CVE-2026-98447)

In the Linux kernel, the following vulnerability has been resolved:

xfs: release orphanage dir inode if chown fails (CVE-2026-98448)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close completed creates on compound wait errors (CVE-2026-98450)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: use finish_no_open() for non-regular inodes (CVE-2026-98451)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: clean up failed cached directory opens (CVE-2026-98452)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close handle after create-context parsing failure (CVE-2026-98453)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix create context out-of-bounds reads (CVE-2026-98454)

In the Linux kernel, the following vulnerability has been resolved:

sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags (CVE-2026-98463)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race (CVE-2026-98467)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Fix spurious warning for benign stage 2 teardown race (CVE-2026-98468)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Fix AArch32 DBGBXVR<n> handling (CVE-2026-98469)

In the Linux kernel, the following vulnerability has been resolved:

perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() (CVE-2026-98477)

In the Linux kernel, the following vulnerability has been resolved:

scsi: libiscsi_tcp: Check the data direction of a Data-In PDU (CVE-2026-98479)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: skip expired catchall elements on insert and delete (CVE-2026-98484)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read (CVE-2026-98485)

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mdb: restart port group walk after deletion (CVE-2026-98487)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: conntrack: fix helper UAF due to extensions realloc (CVE-2026-98490)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry (CVE-2026-98491)

In the Linux kernel, the following vulnerability has been resolved:

net: arp: terminate device name before lookup (CVE-2026-98495)

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: fix swapped IPv6 IPsec policy masks (CVE-2026-98497)

In the Linux kernel, the following vulnerability has been resolved:

packet: use ubuf_info completion for TX_RING packets (CVE-2026-98503)

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() (CVE-2026-98505)

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support (CVE-2026-98506)

In the Linux kernel, the following vulnerability has been resolved:

mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (CVE-2026-98507)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix NULL pointer dereference on fence allocation failure (CVE-2026-98508)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix memory leak of fence event on execbuffer failure (CVE-2026-98509)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: fix incorrect RCU teardown order (CVE-2026-98521)

In the Linux kernel, the following vulnerability has been resolved:

drm/client: fix restore of partially initialized client (CVE-2026-98523)

In the Linux kernel, the following vulnerability has been resolved:

gpio: cdev: fix kernel stack leak to user-space in error path (CVE-2026-98528)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST (CVE-2026-98531)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: do not let ipv6_find_hdr() return an offset past the packet end (CVE-2026-98532)

In the Linux kernel, the following vulnerability has been resolved:

writeback: report a Tasks-RCU quiescent state per cgwb drain pass (CVE-2026-98536)

In the Linux kernel, the following vulnerability has been resolved:

workqueue: Fix NULL current_pwq deref in flush dependency check (CVE-2026-98537)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's WARNING in do_new_mount saga (CVE-2026-98539)

In the Linux kernel, the following vulnerability has been resolved:

fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT (CVE-2026-98541)

In the Linux kernel, the following vulnerability has been resolved:

cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict (CVE-2026-98542)

In the Linux kernel, the following vulnerability has been resolved:

bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir (CVE-2026-98543)

In the Linux kernel, the following vulnerability has been resolved:

ata: libata-scsi: bound the ATA passthru sense descriptor writes (CVE-2026-98545)

In the Linux kernel, the following vulnerability has been resolved:

af_packet: fix integer overflow in prb_calc_retire_blk_tmo() (CVE-2026-98547)

In the Linux kernel, the following vulnerability has been resolved:

sctp: discard the rest of the packet on a stale-cookie error (CVE-2026-98548)

In the Linux kernel, the following vulnerability has been resolved:

tcp: prevent collapsing skbs across boundary in rtx queue (CVE-2026-98549)

In the Linux kernel, the following vulnerability has been resolved:

tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow (CVE-2026-98550)

In the Linux kernel, the following vulnerability has been resolved:

perf/core: Fix a refcount leak in attach_perf_ctx_data() (CVE-2026-98552)

In the Linux kernel, the following vulnerability has been resolved:

autofs: fix sbi->pipe file reference leak in autofs_kill_sb() (CVE-2026-98553)

In the Linux kernel, the following vulnerability has been resolved:

vlan: ensure sufficient headroom in vlan_dev_hard_header() (CVE-2026-98554)

In the Linux kernel, the following vulnerability has been resolved:

net: xps: reject an out of range traffic class (CVE-2026-98567)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use one headroom snapshot for neighbour replies (CVE-2026-98568)

In the Linux kernel, the following vulnerability has been resolved:

ip_gre: Reject enabling collect metadata through changelink (CVE-2026-98569)

In the Linux kernel, the following vulnerability has been resolved:

net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() (CVE-2026-98573)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: fix potential stack infoleak in em_text_dump() (CVE-2026-98584)

In the Linux kernel, the following vulnerability has been resolved:

sctp: hold asoc or transport before mod_timer() in timer handlers (CVE-2026-98586)

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc (CVE-2026-98588)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix bpf_sock context code generation (CVE-2026-98590)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix bounds check for skb-backed dynptrs (CVE-2026-98591)

In the Linux kernel, the following vulnerability has been resolved:

udp: remove a disconnected socket from the 4-tuple hash table (CVE-2026-98595)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix dst leak for uncached routes. (CVE-2026-98596)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Prevent rt6_insert_exception() for dying fib6_info. (CVE-2026-98598)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (CVE-2026-98606)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (CVE-2026-98607)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (CVE-2026-98608)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leak when drm_gem_handle_create() fails (CVE-2026-98609)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget (CVE-2026-98610)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check params size before reading reserved fields (CVE-2026-98611)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Bound ownership depth through local kptrs and graph roots (CVE-2026-98613)

In the Linux kernel, the following vulnerability has been resolved:

sctp: avoid livelock while updating retransmit path (CVE-2026-98614)

In the Linux kernel, the following vulnerability has been resolved:

net: gue: reject invalid REMCSUM offsets (CVE-2026-98621)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_queue: hold nfnl mutex in event notifier (CVE-2026-98624)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: publish HW_DEAD after worker is done (CVE-2026-98625)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Restrict CO-RE poisoning to relocatable instructions (CVE-2026-98626)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_u32: fix manual hash table handle IDR aliasing (CVE-2026-98629)

In the Linux kernel, the following vulnerability has been resolved:

xsk: Use a 32-bit compare in xsk_map_gen_lookup (CVE-2026-98631)

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd_zbc: Reject disks with too many zones (CVE-2026-98634)

In the Linux kernel, the following vulnerability has been resolved:

squashfs: Add dictionary size range check to prevent shift-out-of-bounds (CVE-2026-98636)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (CVE-2026-98637)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (CVE-2026-98638)

In the Linux kernel, the following vulnerability has been resolved:

bpf, arm64: set up the frame pointer for the exception callback (CVE-2026-98641)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk (CVE-2026-98642)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix out-of-bounds read of rtt_min in sock_ops (CVE-2026-98643)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() (CVE-2026-98644)

In the Linux kernel, the following vulnerability has been resolved:

tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context (CVE-2026-98646)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix divide-by-zero in btf_struct_walk() (CVE-2026-98647)

In the Linux kernel, the following vulnerability has been resolved:

perf: Require kernel access for text poke events (CVE-2026-98655)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (CVE-2026-98681)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: flush dirty data before zeroing a range (CVE-2026-98683)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: flush and commit data before querying allocated ranges (CVE-2026-98684)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: discard post-EOF pagecache when extending a file via zero range (CVE-2026-98686)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix ioctl hangup race (CVE-2026-98695)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix driver deregistration order (CVE-2026-98696)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race (CVE-2026-98697)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (CVE-2026-98713)

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted (CVE-2026-98716)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (CVE-2026-98717)

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (CVE-2026-98720)

In the Linux kernel, the following vulnerability has been resolved:

tpm: fix off-by-four bounds check in tpm2_get_random() (CVE-2026-98728)

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h (CVE-2026-98729)

In the Linux kernel, the following vulnerability has been resolved:

arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (CVE-2026-98745)

In the Linux kernel, the following vulnerability has been resolved:

tty: fix saved termios reset race (CVE-2026-98750)

In the Linux kernel, the following vulnerability has been resolved:

tty: abort break signalling on hangup (CVE-2026-98751)

In the Linux kernel, the following vulnerability has been resolved:

tty: port: fix tty_port_tty_vhangup() race (CVE-2026-98752)

In the Linux kernel, the following vulnerability has been resolved:

tty: tty_port: restore TTY_IO_ERROR on activation failure (CVE-2026-98753)

In the Linux kernel, the following vulnerability has been resolved:

usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (CVE-2026-98763)

In the Linux kernel, the following vulnerability has been resolved:

usb: storage: sierra_ms: reject short SWoC info transfers (CVE-2026-98771)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix port tear down use-after-free (CVE-2026-98772)

In the Linux kernel, the following vulnerability has been resolved:

USB: cdc-acm: skip URB restart in port_shutdown if disconnected (CVE-2026-98773)

In the Linux kernel, the following vulnerability has been resolved:

nitro_enclaves: fix use-after-free on SLOT_ALLOC failure (CVE-2026-98775)

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix race between perf_event_exit_task() and perf_pending_task() (CVE-2026-98790)

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference (CVE-2026-98791)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: generalize pending status bit (CVE-2026-98792)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: bpf: reject invalid NAT manipulation types (CVE-2026-98793)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: filter some flags received in the backup server (CVE-2026-98794)

In the Linux kernel, the following vulnerability has been resolved:

net: cap skb->queue_mapping when the tx queue is picked (CVE-2026-98797)

In the Linux kernel, the following vulnerability has been resolved:

net: restrict SO_RESERVE_MEM to TCP sockets and cap max value (CVE-2026-98801)

In the Linux kernel, the following vulnerability has been resolved:

net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() (CVE-2026-98804)

In the Linux kernel, the following vulnerability has been resolved:

tipc: prevent GCM nonce reuse on peer key changes (CVE-2026-98805)

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix slab-out-of-bounds when handling team device events (CVE-2026-98807)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_api: reclaim an empty proto on the error path (CVE-2026-98811)

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: set RQF_USE_SCHED when the operation is known (CVE-2026-98820)

In the Linux kernel, the following vulnerability has been resolved:

block: reject polled dio with user integrity metadata (CVE-2026-98821)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)

In the Linux kernel, the following vulnerability has been resolved:

mtd: core: call _get_device() with the master MTD (CVE-2026-98833)

In the Linux kernel, the following vulnerability has been resolved:

vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() (CVE-2026-98839)

In the Linux kernel, the following vulnerability has been resolved:

vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (CVE-2026-98840)

In the Linux kernel, the following vulnerability has been resolved:

virt: vmgenid: set driver_data before registering notification handlers (CVE-2026-98841)

In the Linux kernel, the following vulnerability has been resolved:

module: fix lost error code from codetag_load_module() (CVE-2026-98842)

In the Linux kernel, the following vulnerability has been resolved:

netfs: zero gaps in read-gaps folio to avoid writing back stale data (CVE-2026-98843)

In the Linux kernel, the following vulnerability has been resolved:

netfs: clear post-EOF pagecache when extending a file via write (CVE-2026-98844)

In the Linux kernel, the following vulnerability has been resolved:

tpm: Disable TPM on null key name mismatch (CVE-2026-98845)

In the Linux kernel, the following vulnerability has been resolved:

sctp: check RCV_SHUTDOWN after the sendmsg connect wait (CVE-2026-98846)

In the Linux kernel, the following vulnerability has been resolved:

net/packet: prevent TX_RING byte count overflow (CVE-2026-98850)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_flow_offload: drop flowtable reference on init error path (CVE-2026-98851)

In the Linux kernel, the following vulnerability has been resolved:

net: extend IPv6 exthdr detection of tunneled packets (CVE-2026-98852)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: only treat a positive changeset id as registered (CVE-2026-98854)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: put property on deadprops only after changeset add succeeds (CVE-2026-98855)

In the Linux kernel, the following vulnerability has been resolved:

kprobes: Skip disarmed probes when checking optkprobe overlap (CVE-2026-98856)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: bound LBLCR and LBLC cache growth (CVE-2026-98857)

In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix task_work add use-after-free with SQPOLL (CVE-2026-98858)

In the Linux kernel, the following vulnerability has been resolved:

HID: multitouch: stop the release timer from being rearmed on remove (CVE-2026-98859)

In the Linux kernel, the following vulnerability has been resolved:

audit: fix exe mark UAF in kill_rules() (CVE-2026-98862)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (CVE-2026-98863)

In the Linux kernel, the following vulnerability has been resolved:

arm64: io: Reject non-user protection in ioremap_prot() (CVE-2026-98923)

In the Linux kernel, the following vulnerability has been resolved:

fs: avoid repeated scans in evict_inodes() (CVE-2026-98924)

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Fix self-redirect copied_seq double-counting (CVE-2026-98925)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Fix life cycle of the nested_mmus array (CVE-2026-98927)

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 (CVE-2026-98928)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: use shorter 120ms post resume hold for SS root hubs (CVE-2026-98933)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() (CVE-2026-98934)

In the Linux kernel, the following vulnerability has been resolved:

rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (CVE-2026-98935)

In the Linux kernel, the following vulnerability has been resolved:

perf/core: Check kernel access when kernel callchains are requested (CVE-2026-98937)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Run 'dnf update kernel6.18 --releasever 2023.12.20261026' or or 'dnf update --advisory ALAS2023-2026-3251 --releasever 2023.12.20261026' to update your system.

Plugin Details

Severity: Critical

ID: 371850

File Name: al2023_ALAS2023-2026-3251.nasl

Version: 1.3

Type: Local

Agent: unix

Family: Amazon Linux Local Security Checks

Published: 10/25/2026

Updated: 11/2/2026

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.2

Percentile: 99.78

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-98548

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:amazon:linux:2023, p-cpe:/a:amazon:linux:bpftool6.18-debuginfo, p-cpe:/a:amazon:linux:bpftool6.18, p-cpe:/a:amazon:linux:kernel-livepatch-6.18.56-125.164, p-cpe:/a:amazon:linux:kernel6.18-debuginfo-common-aarch64, p-cpe:/a:amazon:linux:kernel6.18-debuginfo-common-x86_64, p-cpe:/a:amazon:linux:kernel6.18-debuginfo, p-cpe:/a:amazon:linux:kernel6.18-devel, p-cpe:/a:amazon:linux:kernel6.18-headers, p-cpe:/a:amazon:linux:kernel6.18-modules-extra-common, p-cpe:/a:amazon:linux:kernel6.18-modules-extra, p-cpe:/a:amazon:linux:kernel6.18-tools-debuginfo, p-cpe:/a:amazon:linux:kernel6.18-tools-devel, p-cpe:/a:amazon:linux:kernel6.18-tools, p-cpe:/a:amazon:linux:kernel6.18, p-cpe:/a:amazon:linux:microvm-kernel6.18, p-cpe:/a:amazon:linux:perf6.18-debuginfo, p-cpe:/a:amazon:linux:perf6.18, p-cpe:/a:amazon:linux:python3-perf6.18-debuginfo, p-cpe:/a:amazon:linux:python3-perf6.18

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/24/2026

Vulnerability Publication Date: 8/10/2026

Reference Information

CVE: CVE-2026-68399, CVE-2026-80734, CVE-2026-98034, CVE-2026-98084, CVE-2026-98364, CVE-2026-98373, CVE-2026-98374, CVE-2026-98375, CVE-2026-98377, CVE-2026-98378, CVE-2026-98379, CVE-2026-98380, CVE-2026-98381, CVE-2026-98382, CVE-2026-98383, CVE-2026-98384, CVE-2026-98432, CVE-2026-98440, CVE-2026-98443, CVE-2026-98446, CVE-2026-98447, CVE-2026-98448, CVE-2026-98450, CVE-2026-98451, CVE-2026-98452, CVE-2026-98453, CVE-2026-98454, CVE-2026-98463, CVE-2026-98466, CVE-2026-98467, CVE-2026-98468, CVE-2026-98469, CVE-2026-98477, CVE-2026-98479, CVE-2026-98484, CVE-2026-98485, CVE-2026-98487, CVE-2026-98490, CVE-2026-98491, CVE-2026-98495, CVE-2026-98497, CVE-2026-98503, CVE-2026-98505, CVE-2026-98506, CVE-2026-98507, CVE-2026-98508, CVE-2026-98509, CVE-2026-98521, CVE-2026-98523, CVE-2026-98528, CVE-2026-98531, CVE-2026-98532, CVE-2026-98536, CVE-2026-98537, CVE-2026-98539, CVE-2026-98541, CVE-2026-98542, CVE-2026-98543, CVE-2026-98545, CVE-2026-98547, CVE-2026-98548, CVE-2026-98549, CVE-2026-98550, CVE-2026-98552, CVE-2026-98553, CVE-2026-98554, CVE-2026-98567, CVE-2026-98568, CVE-2026-98569, CVE-2026-98573, CVE-2026-98584, CVE-2026-98586, CVE-2026-98588, CVE-2026-98590, CVE-2026-98591, CVE-2026-98595, CVE-2026-98596, CVE-2026-98598, CVE-2026-98606, CVE-2026-98607, CVE-2026-98608, CVE-2026-98609, CVE-2026-98610, CVE-2026-98611, CVE-2026-98613, CVE-2026-98614, CVE-2026-98621, CVE-2026-98624, CVE-2026-98625, CVE-2026-98626, CVE-2026-98629, CVE-2026-98631, CVE-2026-98634, CVE-2026-98636, CVE-2026-98637, CVE-2026-98638, CVE-2026-98641, CVE-2026-98642, CVE-2026-98643, CVE-2026-98644, CVE-2026-98646, CVE-2026-98647, CVE-2026-98655, CVE-2026-98681, CVE-2026-98683, CVE-2026-98684, CVE-2026-98686, CVE-2026-98695, CVE-2026-98696, CVE-2026-98697, CVE-2026-98713, CVE-2026-98716, CVE-2026-98717, CVE-2026-98720, CVE-2026-98728, CVE-2026-98729, CVE-2026-98745, CVE-2026-98750, CVE-2026-98751, CVE-2026-98752, CVE-2026-98753, CVE-2026-98763, CVE-2026-98771, CVE-2026-98772, CVE-2026-98773, CVE-2026-98775, CVE-2026-98790, CVE-2026-98791, CVE-2026-98792, CVE-2026-98793, CVE-2026-98794, CVE-2026-98797, CVE-2026-98801, CVE-2026-98804, CVE-2026-98805, CVE-2026-98807, CVE-2026-98811, CVE-2026-98820, CVE-2026-98821, CVE-2026-98831, CVE-2026-98833, CVE-2026-98839, CVE-2026-98840, CVE-2026-98841, CVE-2026-98842, CVE-2026-98843, CVE-2026-98844, CVE-2026-98845, CVE-2026-98846, CVE-2026-98850, CVE-2026-98851, CVE-2026-98852, CVE-2026-98854, CVE-2026-98855, CVE-2026-98856, CVE-2026-98857, CVE-2026-98858, CVE-2026-98859, CVE-2026-98862, CVE-2026-98863, CVE-2026-98923, CVE-2026-98924, CVE-2026-98925, CVE-2026-98927, CVE-2026-98928, CVE-2026-98933, CVE-2026-98934, CVE-2026-98935, CVE-2026-98937

Detections

Analytics

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3251)

critical Nessus Plugin ID 371850

Synopsis

Description

Solution

See Also

Plugin Details

Risk Information

VPR

CVSS v2

CVSS v3

Vulnerability Information

Reference Information