Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-139)

critical Nessus Plugin ID 379844

Synopsis

The remote Amazon Linux 2 host is missing a security update.

Description

The version of kernel installed on the remote host is prior to 5.10.273-275.1133. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-139 advisory.

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: make sure gc is properly stopped (CVE-2026-72434)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). (CVE-2026-74406)

In the Linux kernel, the following vulnerability has been resolved:

mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF (CVE-2026-74672)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_u32: skip hash tables in u32_bind_class() (CVE-2026-74739)

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix invalidate lock leak on open O_TRUNC DAX failure (CVE-2026-80855)

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix invalidate lock leak on setattr writeback failure (CVE-2026-80856)

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: bail out of setup if the controller is inaccessible (CVE-2026-80861)

In the Linux kernel, the following vulnerability has been resolved:

mmc: via-sdmmc: cancel card-detect work on remove (CVE-2026-89441)

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: reject a read that transferred too few bytes

nvme_tcp_recv_data() completes a request once the current C2HData PDUhas been consumed. Nothing compares the total bytes received againstthe length the command asked for: struct nvme_tcp_request has noreceive- side counter, queue->data_remaining is per queue, andblk_mq_end_request() completes for blk_rq_bytes(rq) unconditionallywith no residual concept anywhere above.

A controller can therefore answer a 4096-byte read with 512 bytes andhave it reported as a complete read;
user space then gets 4096 bytes ofwhich 3584 are whatever was already in the page. I reproduced that witha test target.

Count the bytes received and refuse to complete a successful read whosecount does not match, at the two NVME_TCP_F_DATA_SUCCESS paths and innvme_tcp_process_nvme_cqe(). The success test shifts req->status rightby one, because the driver keeps the wire value there and shifts it oncompletion, so the check must see what the completion path will see.Only REQ_OP_READ is checked, because there the length comes from thesectors the request covers; a passthrough command is built by itssubmitter, which picks both command and buffer, so the kernel hasnothing to compare against. (CVE-2026-89480)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: reject duplicate CREDS_VALUE options (CVE-2026-89539)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: fix gssx_dec_option_array error path bugs (CVE-2026-89544)

In the Linux kernel, the following vulnerability has been resolved:

params: fix charp corruption on allocation failure (CVE-2026-89552)

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (CVE-2026-89640)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix nfsd_file leak on inter-server COPY setup failure (CVE-2026-89680)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix clock domain mismatch in clients_still_reclaiming() (CVE-2026-89685)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: release path refs on follow_down() error (CVE-2026-89707)

In the Linux kernel, the following vulnerability has been resolved:

device property: fix infinite loop in fwnode_for_each_child_node() (CVE-2026-89744)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix TPM teardown ordering (CVE-2026-89763)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Quiesce response IRQ before freeing request queue (CVE-2026-89848)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (CVE-2026-89859)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Initialize NVMe abort_work once at submission (CVE-2026-89860)

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (CVE-2026-89930)

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Always flush vpid02 on first use (CVE-2026-89932)

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: transfer the pmd dirty bit to the folio on zap (CVE-2026-89987)

In the Linux kernel, the following vulnerability has been resolved:

kprobes: Protect kprobe_blacklist with RCU (CVE-2026-89988)

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Take trace_array reference before accessing its ftrace_ops (CVE-2026-90002)

In the Linux kernel, the following vulnerability has been resolved:

lockd: fix swapped arguments in nlmsvc_match_ip() (CVE-2026-93231)

In the Linux kernel, the following vulnerability has been resolved:

arm64: mm: Fix the lockless page-table walk in show_pte() (CVE-2026-93239)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] (CVE-2026-97529)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (CVE-2026-97532)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (CVE-2026-97536)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (CVE-2026-97537)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: reject userspace cifs.idmap descriptions (CVE-2026-97564)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_api: release all action references on NEWACTION failure (CVE-2026-97616)

In the Linux kernel, the following vulnerability has been resolved:

io_uring/rw: end write accounting from ->ki_complete (CVE-2026-97619)

In the Linux kernel, the following vulnerability has been resolved:

genetlink: pin family module during policy dump (CVE-2026-97901)

In the Linux kernel, the following vulnerability has been resolved:

tick/broadcast: Plug clockevents replacement race (CVE-2026-97925)

In the Linux kernel, the following vulnerability has been resolved:

ipmr: account multicast table and route memory (CVE-2026-97939)

In the Linux kernel, the following vulnerability has been resolved:

nvme: remove stale namespaces by NSID range during scan (CVE-2026-98056)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential OOB read in smb3_enum_snapshots() (CVE-2026-98169)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (CVE-2026-98170)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (CVE-2026-98171)

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: drop RX packets with a short Ethernet header (CVE-2026-98375)

In the Linux kernel, the following vulnerability has been resolved:

vlan: require the MAC header to be present in __vlan_insert_inner_tag() (CVE-2026-98377)

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (CVE-2026-98386)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close completed creates on compound wait errors (CVE-2026-98450)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: use finish_no_open() for non-regular inodes (CVE-2026-98451)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close handle after create-context parsing failure (CVE-2026-98453)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: conntrack: fix helper UAF due to extensions realloc (CVE-2026-98490)

In the Linux kernel, the following vulnerability has been resolved:

mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (CVE-2026-98507)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use one headroom snapshot for neighbour replies (CVE-2026-98568)

In the Linux kernel, the following vulnerability has been resolved:

perf: Require kernel access for text poke events (CVE-2026-98655)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (CVE-2026-98681)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix ioctl hangup race (CVE-2026-98695)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix driver deregistration order (CVE-2026-98696)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race (CVE-2026-98697)

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted (CVE-2026-98716)

In the Linux kernel, the following vulnerability has been resolved:

tty: fix saved termios reset race (CVE-2026-98750)

In the Linux kernel, the following vulnerability has been resolved:

tty: abort break signalling on hangup (CVE-2026-98751)

In the Linux kernel, the following vulnerability has been resolved:

tty: port: fix tty_port_tty_vhangup() race (CVE-2026-98752)

In the Linux kernel, the following vulnerability has been resolved:

tty: tty_port: restore TTY_IO_ERROR on activation failure (CVE-2026-98753)

In the Linux kernel, the following vulnerability has been resolved:

usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (CVE-2026-98763)

In the Linux kernel, the following vulnerability has been resolved:

usb: storage: sierra_ms: reject short SWoC info transfers (CVE-2026-98771)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix port tear down use-after-free (CVE-2026-98772)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: filter some flags received in the backup server (CVE-2026-98794)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)

In the Linux kernel, the following vulnerability has been resolved:

vt: skip screen update for DEC alignment test on backgroup consoles (CVE-2026-98838)

In the Linux kernel, the following vulnerability has been resolved:

vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (CVE-2026-98840)

In the Linux kernel, the following vulnerability has been resolved:

net/packet: prevent TX_RING byte count overflow (CVE-2026-98850)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_flow_offload: drop flowtable reference on init error path (CVE-2026-98851)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: put property on deadprops only after changeset add succeeds (CVE-2026-98855)

In the Linux kernel, the following vulnerability has been resolved:

kprobes: Skip disarmed probes when checking optkprobe overlap (CVE-2026-98856)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: bound LBLCR and LBLC cache growth (CVE-2026-98857)

In the Linux kernel, the following vulnerability has been resolved:

audit: fix exe mark UAF in kill_rules() (CVE-2026-98862)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (CVE-2026-98863)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: use shorter 120ms post resume hold for SS root hubs (CVE-2026-98933)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() (CVE-2026-98934)

In the Linux kernel, the following vulnerability has been resolved:

flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() (CVE-2026-98950)

In the Linux kernel, the following vulnerability has been resolved:

flow_dissector: avoid u16 truncation of skb->len when computing thoff (CVE-2026-98955)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: em_text: reject unterminated algo before autoload (CVE-2026-98969)

In the Linux kernel, the following vulnerability has been resolved:

namespace: handle mount locking for automounts correctly (CVE-2026-98977)

In the Linux kernel, the following vulnerability has been resolved:

namespace: refuse an automount below a mount that is in no namespace (CVE-2026-98979)

In the Linux kernel, the following vulnerability has been resolved:

namespace: unhash a dentry before detaching the mounts on it (CVE-2026-98981)

In the Linux kernel, the following vulnerability has been resolved:

dcache: don't put a mountpoint on a dentry that's being removed (CVE-2026-98984)

In the Linux kernel, the following vulnerability has been resolved:

namespace: check the mounts before reading their parents in pivot_root() (CVE-2026-98985)

In the Linux kernel, the following vulnerability has been resolved:

namespace: check a submount for references right before unmounting it (CVE-2026-98990)

In the Linux kernel, the following vulnerability has been resolved:

namespace: don't copy an unmounted mount tree (CVE-2026-98992)

In the Linux kernel, the following vulnerability has been resolved:

namespace: don't inherit MNT_UMOUNT in clone_mnt() (CVE-2026-98993)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Unmask interrupts only when ACTIVE is true (CVE-2026-99005)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gem: Prevent overstepping exec array boundary (CVE-2026-99006)

In the Linux kernel, the following vulnerability has been resolved:

drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (CVE-2026-99007)

In the Linux kernel, the following vulnerability has been resolved:

scsi: ch: Do not keep references to data transfer element devices (CVE-2026-99019)

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix soft lockup in the netlink flow dump (CVE-2026-99025)

In the Linux kernel, the following vulnerability has been resolved:

net: team: stop reusing skb after queue override (CVE-2026-99027)

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: avoid recursive multicast port cleanup (CVE-2026-99031)

In the Linux kernel, the following vulnerability has been resolved:

net/packet: guard the ll header push in packet_rcv_spkt() (CVE-2026-99033)

In the Linux kernel, the following vulnerability has been resolved:

mmc: mtk-sd: Cancel request timeout work on remove (CVE-2026-99035)

In the Linux kernel, the following vulnerability has been resolved:

dm: fix reading free memory in do_resume (CVE-2026-99036)

In the Linux kernel, the following vulnerability has been resolved:

dm-crypt: reject the lmk IV mode with AEAD ciphers (CVE-2026-99037)

In the Linux kernel, the following vulnerability has been resolved:

memstick: core: wait for request completion before freeing card (CVE-2026-99039)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: Fix add_key() race with keyring restriction (CVE-2026-99040)

In the Linux kernel, the following vulnerability has been resolved:

selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts (CVE-2026-99052)

In the Linux kernel, the following vulnerability has been resolved:

tipc: destroy topsrv workqueues before closing connections (CVE-2026-99054)

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: don't leak the skb when xennet_fill_frags() fails (CVE-2026-99057)

In the Linux kernel, the following vulnerability has been resolved:

workqueue: Fix NULL current_pwq deref in chained work check (CVE-2026-99058)

In the Linux kernel, the following vulnerability has been resolved:

wireguard: noise: reject response consumption after intermediate initiation (CVE-2026-99059)

In the Linux kernel, the following vulnerability has been resolved:

dm ioctl: don't let data_start run past the buffer (CVE-2026-99063)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() (CVE-2026-99067)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: udp: Create exceptions before socket matching (CVE-2026-99077)

In the Linux kernel, the following vulnerability has been resolved:

fs: Free any excess xarray nodes in clear_inode() (CVE-2026-99080)

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: fix DMA mapping length for padded small packets (CVE-2026-99081)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: validate transport header presence in set_ipv6_addr (CVE-2026-99088)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_flower: validate mask pointer after nla_next() (CVE-2026-99112)

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mcast: don't truncate the port group walk on teardown (CVE-2026-99117)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/dmc: Harden DMC firmware payload parsing (CVE-2026-99118)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: avoid divide by zero in fib_rebalance (CVE-2026-99121)

In the Linux kernel, the following vulnerability has been resolved:

sctp: validate chunk length in the inqueue parser (CVE-2026-99128)

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: fix infinite loop on discard with large tag size (CVE-2026-99135)

In the Linux kernel, the following vulnerability has been resolved:

dm-crypt: fix a tiny race condition in crypt_dec_pending (CVE-2026-99136)

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) (CVE-2026-99138)

In the Linux kernel, the following vulnerability has been resolved:

scsi: libiscsi: Validate the ITT reflected in a Reject PDU (CVE-2026-99153)

In the Linux kernel, the following vulnerability has been resolved:

scsi: libiscsi: Reject a negative task index from parse_pdu_itt (CVE-2026-99154)

In the Linux kernel, the following vulnerability has been resolved:

scsi: st: Fix use-after-free race between st_remove() and st_open() (CVE-2026-99156)

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate output stream after association connect wait (CVE-2026-99165)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: fix use-after-free in __tcf_action_put() (CVE-2026-99167)

In the Linux kernel, the following vulnerability has been resolved:

futex: Fix mm reuse handling for FUT_OFF_MMSHARED (CVE-2026-99169)

In the Linux kernel, the following vulnerability has been resolved:

fsnotify: prevent mark additions during connector teardown (CVE-2026-99175)

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (CVE-2026-99176)

In the Linux kernel, the following vulnerability has been resolved:

autofs: ignore notification errors from a replaced pipe (CVE-2026-99181)

In the Linux kernel, the following vulnerability has been resolved:

netlink: avoid hashing the network namespace pointer (CVE-2026-99201)

In the Linux kernel, the following vulnerability has been resolved:

pipe: preserve existing fasync readers on writer setup failure (CVE-2026-99203)

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix race in discovery auth updates (CVE-2026-99206)

In the Linux kernel, the following vulnerability has been resolved:

netlink: reset skb headers before unicast and multicast filtering (CVE-2026-99211)

In the Linux kernel, the following vulnerability has been resolved:

vsock: treat TCP_CLOSING as once-established (CVE-2026-99213)

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: Don't reset VMBus connection state on error/exit paths (CVE-2026-99216)

In the Linux kernel, the following vulnerability has been resolved:

keys: Protect the read method check against type removal (CVE-2026-99222)

In the Linux kernel, the following vulnerability has been resolved:

keys: make keyring indexes independent of kernel addresses (CVE-2026-99223)

In the Linux kernel, the following vulnerability has been resolved:

keys: Check the authorization payload in process keyring searches (CVE-2026-99225)

In the Linux kernel, the following vulnerability has been resolved:

keys: Avoid the owner account dereference in named keyring lookup (CVE-2026-99226)

In the Linux kernel, the following vulnerability has been resolved:

tracing: Reject incomplete event filter expressions (CVE-2026-99236)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: Fix key_reject_and_link() race with keyring restriction (CVE-2026-99245)

In the Linux kernel, the following vulnerability has been resolved:

tipc: protect node reset trace dump with node lock (CVE-2026-99246)

In the Linux kernel, the following vulnerability has been resolved:

dm cache: fix issue with background work locking (CVE-2026-99256)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Run 'yum update kernel' or or 'yum update --advisory ALAS2KERNEL-5.10-2026-139' to update your system.

See Also

https://alas.aws.amazon.com//AL2/ALAS2KERNEL-5.10-2026-139.html

https://alas.aws.amazon.com/faqs.html

https://explore.alas.aws.amazon.com/CVE-2026-72434.html

https://explore.alas.aws.amazon.com/CVE-2026-74406.html

https://explore.alas.aws.amazon.com/CVE-2026-74672.html

https://explore.alas.aws.amazon.com/CVE-2026-74739.html

https://explore.alas.aws.amazon.com/CVE-2026-80855.html

https://explore.alas.aws.amazon.com/CVE-2026-80856.html

https://explore.alas.aws.amazon.com/CVE-2026-80861.html

https://explore.alas.aws.amazon.com/CVE-2026-89441.html

https://explore.alas.aws.amazon.com/CVE-2026-89480.html

https://explore.alas.aws.amazon.com/CVE-2026-89539.html

https://explore.alas.aws.amazon.com/CVE-2026-89544.html

https://explore.alas.aws.amazon.com/CVE-2026-89552.html

https://explore.alas.aws.amazon.com/CVE-2026-89640.html

https://explore.alas.aws.amazon.com/CVE-2026-89680.html

https://explore.alas.aws.amazon.com/CVE-2026-89685.html

https://explore.alas.aws.amazon.com/CVE-2026-89707.html

https://explore.alas.aws.amazon.com/CVE-2026-89744.html

https://explore.alas.aws.amazon.com/CVE-2026-89763.html

https://explore.alas.aws.amazon.com/CVE-2026-89848.html

https://explore.alas.aws.amazon.com/CVE-2026-89859.html

https://explore.alas.aws.amazon.com/CVE-2026-89860.html

https://explore.alas.aws.amazon.com/CVE-2026-89930.html

https://explore.alas.aws.amazon.com/CVE-2026-89932.html

https://explore.alas.aws.amazon.com/CVE-2026-89987.html

https://explore.alas.aws.amazon.com/CVE-2026-89988.html

https://explore.alas.aws.amazon.com/CVE-2026-90002.html

https://explore.alas.aws.amazon.com/CVE-2026-93231.html

https://explore.alas.aws.amazon.com/CVE-2026-93239.html

https://explore.alas.aws.amazon.com/CVE-2026-97529.html

https://explore.alas.aws.amazon.com/CVE-2026-97532.html

https://explore.alas.aws.amazon.com/CVE-2026-97536.html

https://explore.alas.aws.amazon.com/CVE-2026-97537.html

https://explore.alas.aws.amazon.com/CVE-2026-97564.html

https://explore.alas.aws.amazon.com/CVE-2026-97616.html

https://explore.alas.aws.amazon.com/CVE-2026-97619.html

https://explore.alas.aws.amazon.com/CVE-2026-97901.html

https://explore.alas.aws.amazon.com/CVE-2026-97925.html

https://explore.alas.aws.amazon.com/CVE-2026-97939.html

https://explore.alas.aws.amazon.com/CVE-2026-98056.html

https://explore.alas.aws.amazon.com/CVE-2026-98169.html

https://explore.alas.aws.amazon.com/CVE-2026-98170.html

https://explore.alas.aws.amazon.com/CVE-2026-98171.html

https://explore.alas.aws.amazon.com/CVE-2026-98375.html

https://explore.alas.aws.amazon.com/CVE-2026-98377.html

https://explore.alas.aws.amazon.com/CVE-2026-98386.html

https://explore.alas.aws.amazon.com/CVE-2026-98450.html

https://explore.alas.aws.amazon.com/CVE-2026-98451.html

https://explore.alas.aws.amazon.com/CVE-2026-98453.html

https://explore.alas.aws.amazon.com/CVE-2026-98490.html

https://explore.alas.aws.amazon.com/CVE-2026-98507.html

https://explore.alas.aws.amazon.com/CVE-2026-98568.html

https://explore.alas.aws.amazon.com/CVE-2026-98655.html

https://explore.alas.aws.amazon.com/CVE-2026-98681.html

https://explore.alas.aws.amazon.com/CVE-2026-98695.html

https://explore.alas.aws.amazon.com/CVE-2026-98696.html

https://explore.alas.aws.amazon.com/CVE-2026-98697.html

https://explore.alas.aws.amazon.com/CVE-2026-98716.html

https://explore.alas.aws.amazon.com/CVE-2026-98750.html

https://explore.alas.aws.amazon.com/CVE-2026-98751.html

https://explore.alas.aws.amazon.com/CVE-2026-98752.html

https://explore.alas.aws.amazon.com/CVE-2026-98753.html

https://explore.alas.aws.amazon.com/CVE-2026-98763.html

https://explore.alas.aws.amazon.com/CVE-2026-98771.html

https://explore.alas.aws.amazon.com/CVE-2026-98772.html

https://explore.alas.aws.amazon.com/CVE-2026-98794.html

https://explore.alas.aws.amazon.com/CVE-2026-98831.html

https://explore.alas.aws.amazon.com/CVE-2026-98838.html

https://explore.alas.aws.amazon.com/CVE-2026-98840.html

https://explore.alas.aws.amazon.com/CVE-2026-98850.html

https://explore.alas.aws.amazon.com/CVE-2026-98851.html

https://explore.alas.aws.amazon.com/CVE-2026-98855.html

https://explore.alas.aws.amazon.com/CVE-2026-98856.html

https://explore.alas.aws.amazon.com/CVE-2026-98857.html

https://explore.alas.aws.amazon.com/CVE-2026-98862.html

https://explore.alas.aws.amazon.com/CVE-2026-98863.html

https://explore.alas.aws.amazon.com/CVE-2026-98933.html

https://explore.alas.aws.amazon.com/CVE-2026-98934.html

https://explore.alas.aws.amazon.com/CVE-2026-98950.html

https://explore.alas.aws.amazon.com/CVE-2026-98955.html

https://explore.alas.aws.amazon.com/CVE-2026-98969.html

https://explore.alas.aws.amazon.com/CVE-2026-98977.html

https://explore.alas.aws.amazon.com/CVE-2026-98979.html

https://explore.alas.aws.amazon.com/CVE-2026-98981.html

https://explore.alas.aws.amazon.com/CVE-2026-98984.html

https://explore.alas.aws.amazon.com/CVE-2026-98985.html

https://explore.alas.aws.amazon.com/CVE-2026-98990.html

https://explore.alas.aws.amazon.com/CVE-2026-98992.html

https://explore.alas.aws.amazon.com/CVE-2026-98993.html

https://explore.alas.aws.amazon.com/CVE-2026-99005.html

https://explore.alas.aws.amazon.com/CVE-2026-99006.html

https://explore.alas.aws.amazon.com/CVE-2026-99007.html

https://explore.alas.aws.amazon.com/CVE-2026-99019.html

https://explore.alas.aws.amazon.com/CVE-2026-99025.html

https://explore.alas.aws.amazon.com/CVE-2026-99027.html

https://explore.alas.aws.amazon.com/CVE-2026-99031.html

https://explore.alas.aws.amazon.com/CVE-2026-99033.html

https://explore.alas.aws.amazon.com/CVE-2026-99035.html

https://explore.alas.aws.amazon.com/CVE-2026-99036.html

https://explore.alas.aws.amazon.com/CVE-2026-99037.html

https://explore.alas.aws.amazon.com/CVE-2026-99039.html

https://explore.alas.aws.amazon.com/CVE-2026-99040.html

https://explore.alas.aws.amazon.com/CVE-2026-99052.html

https://explore.alas.aws.amazon.com/CVE-2026-99054.html

https://explore.alas.aws.amazon.com/CVE-2026-99057.html

https://explore.alas.aws.amazon.com/CVE-2026-99058.html

https://explore.alas.aws.amazon.com/CVE-2026-99059.html

https://explore.alas.aws.amazon.com/CVE-2026-99063.html

https://explore.alas.aws.amazon.com/CVE-2026-99067.html

https://explore.alas.aws.amazon.com/CVE-2026-99077.html

https://explore.alas.aws.amazon.com/CVE-2026-99080.html

https://explore.alas.aws.amazon.com/CVE-2026-99081.html

https://explore.alas.aws.amazon.com/CVE-2026-99088.html

https://explore.alas.aws.amazon.com/CVE-2026-99112.html

https://explore.alas.aws.amazon.com/CVE-2026-99117.html

https://explore.alas.aws.amazon.com/CVE-2026-99118.html

https://explore.alas.aws.amazon.com/CVE-2026-99121.html

https://explore.alas.aws.amazon.com/CVE-2026-99128.html

https://explore.alas.aws.amazon.com/CVE-2026-99135.html

https://explore.alas.aws.amazon.com/CVE-2026-99136.html

https://explore.alas.aws.amazon.com/CVE-2026-99138.html

https://explore.alas.aws.amazon.com/CVE-2026-99153.html

https://explore.alas.aws.amazon.com/CVE-2026-99154.html

https://explore.alas.aws.amazon.com/CVE-2026-99156.html

https://explore.alas.aws.amazon.com/CVE-2026-99165.html

https://explore.alas.aws.amazon.com/CVE-2026-99167.html

https://explore.alas.aws.amazon.com/CVE-2026-99169.html

https://explore.alas.aws.amazon.com/CVE-2026-99175.html

https://explore.alas.aws.amazon.com/CVE-2026-99176.html

https://explore.alas.aws.amazon.com/CVE-2026-99181.html

https://explore.alas.aws.amazon.com/CVE-2026-99201.html

https://explore.alas.aws.amazon.com/CVE-2026-99203.html

https://explore.alas.aws.amazon.com/CVE-2026-99206.html

https://explore.alas.aws.amazon.com/CVE-2026-99211.html

https://explore.alas.aws.amazon.com/CVE-2026-99213.html

https://explore.alas.aws.amazon.com/CVE-2026-99216.html

https://explore.alas.aws.amazon.com/CVE-2026-99222.html

https://explore.alas.aws.amazon.com/CVE-2026-99223.html

https://explore.alas.aws.amazon.com/CVE-2026-99225.html

https://explore.alas.aws.amazon.com/CVE-2026-99226.html

https://explore.alas.aws.amazon.com/CVE-2026-99236.html

https://explore.alas.aws.amazon.com/CVE-2026-99245.html

https://explore.alas.aws.amazon.com/CVE-2026-99246.html

https://explore.alas.aws.amazon.com/CVE-2026-99256.html

Plugin Details

Severity: Critical

ID: 379844

File Name: al2_ALASKERNEL-5_10-2026-139.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 11/12/2026

Updated: 11/12/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.12

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-99154

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:amazon:linux:2, p-cpe:/a:amazon:linux:bpftool-debuginfo, p-cpe:/a:amazon:linux:bpftool, p-cpe:/a:amazon:linux:kernel-debuginfo-common-aarch64, p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64, p-cpe:/a:amazon:linux:kernel-debuginfo, p-cpe:/a:amazon:linux:kernel-devel, p-cpe:/a:amazon:linux:kernel-headers, p-cpe:/a:amazon:linux:kernel-livepatch-5.10.273-275.1133, p-cpe:/a:amazon:linux:kernel-tools-debuginfo, p-cpe:/a:amazon:linux:kernel-tools-devel, p-cpe:/a:amazon:linux:kernel-tools, p-cpe:/a:amazon:linux:kernel, p-cpe:/a:amazon:linux:microvm-kernel, p-cpe:/a:amazon:linux:perf-debuginfo, p-cpe:/a:amazon:linux:perf, p-cpe:/a:amazon:linux:python-perf-debuginfo, p-cpe:/a:amazon:linux:python-perf

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 11/12/2026

Vulnerability Publication Date: 8/11/2026

Reference Information

CVE: CVE-2026-72434, CVE-2026-74406, CVE-2026-74672, CVE-2026-74739, CVE-2026-80855, CVE-2026-80856, CVE-2026-80861, CVE-2026-89441, CVE-2026-89480, CVE-2026-89539, CVE-2026-89544, CVE-2026-89552, CVE-2026-89640, CVE-2026-89680, CVE-2026-89685, CVE-2026-89707, CVE-2026-89744, CVE-2026-89763, CVE-2026-89848, CVE-2026-89859, CVE-2026-89860, CVE-2026-89930, CVE-2026-89932, CVE-2026-89987, CVE-2026-89988, CVE-2026-90002, CVE-2026-93231, CVE-2026-93239, CVE-2026-97529, CVE-2026-97532, CVE-2026-97536, CVE-2026-97537, CVE-2026-97564, CVE-2026-97616, CVE-2026-97619, CVE-2026-97901, CVE-2026-97925, CVE-2026-97939, CVE-2026-98056, CVE-2026-98169, CVE-2026-98170, CVE-2026-98171, CVE-2026-98375, CVE-2026-98377, CVE-2026-98386, CVE-2026-98450, CVE-2026-98451, CVE-2026-98453, CVE-2026-98490, CVE-2026-98507, CVE-2026-98568, CVE-2026-98655, CVE-2026-98681, CVE-2026-98695, CVE-2026-98696, CVE-2026-98697, CVE-2026-98716, CVE-2026-98750, CVE-2026-98751, CVE-2026-98752, CVE-2026-98753, CVE-2026-98763, CVE-2026-98771, CVE-2026-98772, CVE-2026-98794, CVE-2026-98831, CVE-2026-98838, CVE-2026-98840, CVE-2026-98850, CVE-2026-98851, CVE-2026-98855, CVE-2026-98856, CVE-2026-98857, CVE-2026-98862, CVE-2026-98863, CVE-2026-98933, CVE-2026-98934, CVE-2026-98950, CVE-2026-98955, CVE-2026-98969, CVE-2026-98977, CVE-2026-98979, CVE-2026-98981, CVE-2026-98984, CVE-2026-98985, CVE-2026-98990, CVE-2026-98992, CVE-2026-98993, CVE-2026-99005, CVE-2026-99006, CVE-2026-99007, CVE-2026-99019, CVE-2026-99025, CVE-2026-99027, CVE-2026-99031, CVE-2026-99033, CVE-2026-99035, CVE-2026-99036, CVE-2026-99037, CVE-2026-99039, CVE-2026-99040, CVE-2026-99052, CVE-2026-99054, CVE-2026-99057, CVE-2026-99058, CVE-2026-99059, CVE-2026-99063, CVE-2026-99067, CVE-2026-99077, CVE-2026-99080, CVE-2026-99081, CVE-2026-99088, CVE-2026-99112, CVE-2026-99117, CVE-2026-99118, CVE-2026-99121, CVE-2026-99128, CVE-2026-99135, CVE-2026-99136, CVE-2026-99138, CVE-2026-99153, CVE-2026-99154, CVE-2026-99156, CVE-2026-99165, CVE-2026-99167, CVE-2026-99169, CVE-2026-99175, CVE-2026-99176, CVE-2026-99181, CVE-2026-99201, CVE-2026-99203, CVE-2026-99206, CVE-2026-99211, CVE-2026-99213, CVE-2026-99216, CVE-2026-99222, CVE-2026-99223, CVE-2026-99225, CVE-2026-99226, CVE-2026-99236, CVE-2026-99245, CVE-2026-99246, CVE-2026-99256