{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Rebase to Amazon Linux 2 kernel-5.10.270-271.1109.amzn2 patch line and upstream stable 5.10.272\n- ipv4: validate checksum_start before completing checksum {CVE-2026-99999}\n- ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432}\n- hwmon: axi-fan: don't use driver_override as IRQ name\n- driver core: generalize driver_override in struct device\n- xfrm: fix stale skb->prev after async crypto steals a GSO segment {CVE-2026-68426}\n- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965}\n- xfrm: Duplicate SPI Handling {CVE-2025-39797}\n- ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111}\n- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}\n- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}\n- SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}\n- libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}\n- netpoll: fix a use-after-free on shutdown path {CVE-2026-64424}\n- ip: orphan prefetched skbs before multicast forwarding {CVE-2026-89564}\n- net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}\n- ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289}\n- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}\n- tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}\n- PCI: use generic driver_override infrastructure {CVE-2026-53120}\n- driver core: platform: use generic driver_override infrastructure {CVE-2026-31527}\n- loop: Fix use-after-free issues {CVE-2023-53111}\n- dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939}\n- xfs: don't walk off the end of a directory data block {CVE-2024-41013}\n- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}\n- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168}\n- bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}\n- net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934}\n- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap {CVE-2021-47200}\n- smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864}\n- bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063}\n- xfrm: Don't clobber inner headers when already set {CVE-2026-53091}\n- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/amazonlinux2els/advisories/2026/clsa-2026_1792401579.json" } ], "tracking": { "current_release_date": "2026-10-23T12:29:13Z", "generator": { "date": "2026-10-23T12:29:13Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792401579", "initial_release_date": "2026-10-19T09:19:41Z", "revision_history": [ { "date": "2026-10-19T09:19:41Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-23T12:29:13Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "kernel: Fix of 28 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "Amazon-Linux-2", "product_identification_helper": { "cpe": "cpe:2.3:o:amazon:amazon_linux:2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Amazon Linux" } ], "category": "vendor", "name": "Amazon Web Services, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-perf@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-devel@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.10.272-271.1109.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-perf@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-devel@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product": { "name": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_id": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.10.259-258.1046.amzn2.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-devel@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-perf@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product": { "name": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_id": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.10.259-258.1046.amzn2.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" }, "product_reference": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64" }, "product_reference": "kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "relates_to_product_reference": "Amazon-Linux-2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-53131", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: require Ethernet MAC header before using eth_hdr()\n\n`ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `hash:ip,mac`, and\n`hash:mac` ipset types, and `nf_log_syslog` access `eth_hdr(skb)`\nafter either assuming that the skb is associated with an Ethernet\ndevice or checking only that the `ETH_HLEN` bytes at\n`skb_mac_header(skb)` lie between `skb->head` and `skb->data`.\n\nMake these paths first verify that the skb is associated with an\nEthernet device, that the MAC header was set, and that it spans at\nleast a full Ethernet header before accessing `eth_hdr(skb)`.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53131" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/063f43361e884acd7300790e90194430275d0d0c", "url": "https://git.kernel.org/stable/c/063f43361e884acd7300790e90194430275d0d0c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/367abcacc13a8e2e7624408b7f593bd1e60e49d9", "url": "https://git.kernel.org/stable/c/367abcacc13a8e2e7624408b7f593bd1e60e49d9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4435888e1bf139d2bfe5911643d4217382136743", "url": "https://git.kernel.org/stable/c/4435888e1bf139d2bfe5911643d4217382136743" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5d634afb8b83b49de562792fd0d047416a43bd4d", "url": "https://git.kernel.org/stable/c/5d634afb8b83b49de562792fd0d047416a43bd4d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137", "url": "https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/726abf97566867f808fec9d8a408eb9698bd570a", "url": "https://git.kernel.org/stable/c/726abf97566867f808fec9d8a408eb9698bd570a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cea435ea7e868ea6fdf039bc4f2090c1d829b556", "url": "https://git.kernel.org/stable/c/cea435ea7e868ea6fdf039bc4f2090c1d829b556" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html" } ], "release_date": "2026-06-25T09:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-06-25T09:16:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-53168", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \n \n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp's timer handler function causes problems.\n\nTo fix this problem, let's hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-53168" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0ca87e5063757132a044d35baba40a7d4bb25394", "url": "https://git.kernel.org/stable/c/0ca87e5063757132a044d35baba40a7d4bb25394" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f23f96528e8fcf8619895c4c916c52653892ec1", "url": "https://git.kernel.org/stable/c/3f23f96528e8fcf8619895c4c916c52653892ec1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/61c0a5eac96836de5e3a5897eccdc63162a94936", "url": "https://git.kernel.org/stable/c/61c0a5eac96836de5e3a5897eccdc63162a94936" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/694ccb05b79ee5f5a9f14c2f80d2635d3bb8bdc3", "url": "https://git.kernel.org/stable/c/694ccb05b79ee5f5a9f14c2f80d2635d3bb8bdc3" } ], "release_date": "2024-12-27T13:49:14Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-12-27T13:49:14Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-53091", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pull headers in qdisc_pkt_len_segs_init()\n\nMost ndo_start_xmit() methods expects headers of gso packets\nto be already in skb->head.\n\nnet/core/tso.c users are particularly at risk, because tso_build_hdr()\ndoes a memcpy(hdr, skb->data, hdr_len);\n\nqdisc_pkt_len_segs_init() already does a dissection of gso packets.\n\nUse pskb_may_pull() instead of skb_header_pointer() to make\nsure drivers do not have to reimplement this.\n\nSome malicious packets could be fed, detect them so that we can\ndrop them sooner with a new SKB_DROP_REASON_SKB_BAD_GSO drop_reason.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53091" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5895cfc76924a629c6eaa5e5f049de642860045f", "url": "https://git.kernel.org/stable/c/5895cfc76924a629c6eaa5e5f049de642860045f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7564dc804d8289d2e5c6edb8173754051b71bff4", "url": "https://git.kernel.org/stable/c/7564dc804d8289d2e5c6edb8173754051b71bff4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4", "url": "https://git.kernel.org/stable/c/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d4f5c68f5ad4ab425f3ce1500c97c9f9743999a", "url": "https://git.kernel.org/stable/c/9d4f5c68f5ad4ab425f3ce1500c97c9f9743999a" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65334", "url": "https://access.redhat.com/errata/RHSA-2026:65334" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66324", "url": "https://access.redhat.com/errata/RHSA-2026:66324" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66325", "url": "https://access.redhat.com/errata/RHSA-2026:66325" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:67150", "url": "https://access.redhat.com/errata/RHSA-2026:67150" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-53091", "url": "https://access.redhat.com/security/cve/CVE-2026-53091" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492270" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53091.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53091.json" } ], "release_date": "2026-06-24T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-06-24T17:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39797", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Duplicate SPI Handling\n\nThe issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI\nNetlink message, which triggers the kernel function xfrm_alloc_spi().\nThis function is expected to ensure uniqueness of the Security Parameter\nIndex (SPI) for inbound Security Associations (SAs). However, it can\nreturn success even when the requested SPI is already in use, leading\nto duplicate SPIs assigned to multiple inbound SAs, differentiated\nonly by their destination addresses.\n\nThis behavior causes inconsistencies during SPI lookups for inbound packets.\nSince the lookup may return an arbitrary SA among those with the same SPI,\npacket processing can fail, resulting in packet drops.\n\nAccording to RFC 4301 section 4.4.2 , for inbound processing a unicast SA\nis uniquely identified by the SPI and optionally protocol.\n\nReproducing the Issue Reliably:\nTo consistently reproduce the problem, restrict the available SPI range in\ncharon.conf : spi_min = 0x10000000 spi_max = 0x10000002\nThis limits the system to only 2 usable SPI values.\nNext, create more than 2 Child SA. each using unique pair of src/dst address.\nAs soon as the 3rd Child SA is initiated, it will be assigned a duplicate\nSPI, since the SPI pool is already exhausted.\nWith a narrow SPI range, the issue is consistently reproducible.\nWith a broader/default range, it becomes rare and unpredictable.\n\nCurrent implementation:\nxfrm_spi_hash() lookup function computes hash using daddr, proto, and family.\nSo if two SAs have the same SPI but different destination addresses, then\nthey will:\na. Hash into different buckets\nb. Be stored in different linked lists (byspi + h)\nc. Not be seen in the same hlist_for_each_entry_rcu() iteration.\nAs a result, the lookup will result in NULL and kernel allows that Duplicate SPI\n\nProposed Change:\nxfrm_state_lookup_spi_proto() does a truly global search - across all states,\nregardless of hash bucket and matches SPI and proto.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39797" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/29e9158f91f99057dbd35db5e8674d93b38549fe", "url": "https://git.kernel.org/stable/c/29e9158f91f99057dbd35db5e8674d93b38549fe" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2fc5b54368a1bf1d2d74b4d3b8eea5309a653e38", "url": "https://git.kernel.org/stable/c/2fc5b54368a1bf1d2d74b4d3b8eea5309a653e38" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3d8090bb53424432fa788fe9a49e8ceca74f0544", "url": "https://git.kernel.org/stable/c/3d8090bb53424432fa788fe9a49e8ceca74f0544" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94f39804d891cffe4ce17737d295f3b195bc7299", "url": "https://git.kernel.org/stable/c/94f39804d891cffe4ce17737d295f3b195bc7299" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c67d4e7a8f90fb6361ca89d4d5c9a28f4e935e47", "url": "https://git.kernel.org/stable/c/c67d4e7a8f90fb6361ca89d4d5c9a28f4e935e47" } ], "release_date": "2025-09-12T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2025-09-12T16:15:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-74289", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: fib: Don't dump dying fib_info in fib_leaf_notify().\n\nsyzbot reported use-after-free in nsim_fib4_prepare_event(). [0]\n\nThe problem is that the following functions call fib_info_hold() /\nrefcount_inc() while dumping fib_info under RCU, which is unsafe.\n\n * mlxsw_sp_router_fib4_event()\n * rocker_router_fib_event()\n * nsim_fib4_prepare_event()\n\nrefcount_inc_not_zero() must be used, but it would be too late\nthere.\n\nLet's guarantee the lifetime of fib_info in fib_leaf_notify().\n\nNote that IPv6 does not need the corresponding change since\nfib6_table_dump() holds fib6_table.tb6_lock.\n\n[0]:\nrefcount_t: addition on 0; use-after-free.\nWARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110 lib/refcount.c:25, CPU#0: kworker/u8:15/3420\nModules linked in:\nCPU: 0 UID: 0 PID: 3420 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)}\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026\nWorkqueue: netns cleanup_net\nRIP: 0010:refcount_warn_saturate+0x9f/0x110 lib/refcount.c:25\nCode: eb 66 85 db 74 3e 83 fb 01 75 4c e8 1b f1 22 fd 48 8d 3d 84 cb f1 0a 67 48 0f b9 3a eb 4a e8 08 f1 22 fd 48 8d 3d 81 cb f1 0a <67> 48 0f b9 3a eb 37 e8 f5 f0 22 fd 48 8d 3d 7e cb f1 0a 67 48 0f\nRSP: 0018:ffffc9000f2c7270 EFLAGS: 00010293\nRAX: ffffffff84a18858 RBX: 0000000000000002 RCX: ffff888032ff9ec0\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f9353e0\nRBP: 0000000000000000 R08: ffff888032ff9ec0 R09: 0000000000000005\nR10: 0000000000000100 R11: 0000000000000004 R12: ffff8880570cc000\nR13: dffffc0000000000 R14: ffff88802b40563c R15: ffff8880570cc000\nFS: 0000000000000000(0000) GS:ffff888126173000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fb1f4d5d000 CR3: 000000006072a000 CR4: 00000000003526f0\nCall Trace:\n \n __refcount_add include/linux/refcount.h:-1 [inline]\n __refcount_inc include/linux/refcount.h:366 [inline]\n refcount_inc include/linux/refcount.h:383 [inline]\n fib_info_hold include/net/ip_fib.h:629 [inline]\n nsim_fib4_prepare_event drivers/net/netdevsim/fib.c:930 [inline]\n nsim_fib_event_schedule_work drivers/net/netdevsim/fib.c:1000 [inline]\n nsim_fib_event_nb+0x1055/0x1240 drivers/net/netdevsim/fib.c:1043\n call_fib_notifier+0x45/0x80 net/core/fib_notifier.c:25\n call_fib_entry_notifier net/ipv4/fib_trie.c:90 [inline]\n fib_leaf_notify net/ipv4/fib_trie.c:2176 [inline]\n fib_table_notify net/ipv4/fib_trie.c:2194 [inline]\n fib_notify+0x36b/0x5e0 net/ipv4/fib_trie.c:2217\n fib_net_dump net/core/fib_notifier.c:70 [inline]\n register_fib_notifier+0x184/0x360 net/core/fib_notifier.c:108\n nsim_fib_create+0x85d/0x9f0 drivers/net/netdevsim/fib.c:1596\n nsim_dev_reload_create drivers/net/netdevsim/dev.c:1604 [inline]\n nsim_dev_reload_up+0x374/0x7c0 drivers/net/netdevsim/dev.c:1058\n devlink_reload+0x501/0x8d0 net/devlink/dev.c:475\n devlink_pernet_pre_exit+0x1ff/0x420 net/devlink/core.c:558\n ops_pre_exit_list net/core/net_namespace.c:161 [inline]\n ops_undo_list+0x187/0x940 net/core/net_namespace.c:234\n cleanup_net+0x56e/0x800 net/core/net_namespace.c:702\n process_one_work kernel/workqueue.c:3314 [inline]\n process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397\n worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478\n kthread+0x388/0x470 kernel/kthread.c:436\n ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245\n ", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74289" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/06b693d2eb6651a63ad85bad8673de3b7d4edd6d", "url": "https://git.kernel.org/stable/c/06b693d2eb6651a63ad85bad8673de3b7d4edd6d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/676482da8d938ea72c26da0fc86af2d2ec238ab2", "url": "https://git.kernel.org/stable/c/676482da8d938ea72c26da0fc86af2d2ec238ab2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7907a395701b339c2d68f37456d395e953c74795", "url": "https://git.kernel.org/stable/c/7907a395701b339c2d68f37456d395e953c74795" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7980a13add57f97c5da1dc961d0145a6ad2a7f98", "url": "https://git.kernel.org/stable/c/7980a13add57f97c5da1dc961d0145a6ad2a7f98" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8bdb20b8a581495062b5879f4e9d435da648b3b0", "url": "https://git.kernel.org/stable/c/8bdb20b8a581495062b5879f4e9d435da648b3b0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bea03e887db5a8a79234531faf14cf2c4d8816c3", "url": "https://git.kernel.org/stable/c/bea03e887db5a8a79234531faf14cf2c4d8816c3" } ], "release_date": "2026-08-15T06:22:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-08-15T06:22:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-44934", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: wait for previous gc cycles when removing port\n\nsyzbot hit a use-after-free[1] which is caused because the bridge doesn't\nmake sure that all previous garbage has been collected when removing a\nport. What happens is:\n CPU 1 CPU 2\n start gc cycle remove port\n acquire gc lock first\n wait for lock\n call br_multicasg_gc() directly\n acquire lock now but free port\n the port can be freed\n while grp timers still\n running\n\nMake sure all previous gc cycles have finished by using flush_work before\nfreeing the port.\n\n[1]\n BUG: KASAN: slab-use-after-free in br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n Read of size 8 at addr ffff888071d6d000 by task syz.5.1232/9699\n\n CPU: 1 PID: 9699 Comm: syz.5.1232 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n Call Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc3/0x620 mm/kasan/report.c:488\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n call_timer_fn+0x1a3/0x610 kernel/time/timer.c:1792\n expire_timers kernel/time/timer.c:1843 [inline]\n __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417\n __run_timer_base kernel/time/timer.c:2428 [inline]\n __run_timer_base kernel/time/timer.c:2421 [inline]\n run_timer_base+0x111/0x190 kernel/time/timer.c:2437", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-44934" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0d8b26e10e680c01522d7cc14abe04c3265a928f", "url": "https://git.kernel.org/stable/c/0d8b26e10e680c01522d7cc14abe04c3265a928f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e16828020c674b3be85f52685e8b80f9008f50f", "url": "https://git.kernel.org/stable/c/1e16828020c674b3be85f52685e8b80f9008f50f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/92c4ee25208d0f35dafc3213cdf355fbe449e078", "url": "https://git.kernel.org/stable/c/92c4ee25208d0f35dafc3213cdf355fbe449e078" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b2f794b168cf560682ff976b255aa6d29d14a658", "url": "https://git.kernel.org/stable/c/b2f794b168cf560682ff976b255aa6d29d14a658" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3145ca904fa8dbfd1a5bf0187905bc117b0efce", "url": "https://git.kernel.org/stable/c/e3145ca904fa8dbfd1a5bf0187905bc117b0efce" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html" } ], "release_date": "2024-08-26T10:11:25Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-08-26T10:11:25Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98432", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: free inet_opt and ireq_opt after an RCU grace period\n\ntcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the\nchild socket (newinet->inet_opt) without copying it.\n\nAnother cpu can concurrently process a retransmitted SYN for the same\nrequest socket, and send a SYNACK from tcp_check_req().\ntcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt\nunder rcu_read_lock() only, and ip_build_and_send_pkt() and\nip_options_build() then read opt->optlen twice.\n\nNote that the SYNACK timer itself is not an issue: it holds a\nreference on its request socket, and inet_csk_reqsk_queue_drop()\ncalls timer_delete_sync() before the child can be freed.\n\nSince commit 079096f103fa (\"tcp/dccp: install syn_recv requests\ninto ehash table\"), request sockets are processed without holding\nthe listener lock, so nothing prevents the child socket from being\nfreed while the SYNACK is still being built. TCP child sockets do\nnot have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt\nwith a plain kfree(), leading to a use-after-free in\nip_options_build().\n\nA similar issue exists with request socket migration\n(net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE\nprogram). reqsk_timer_handler() clones the request socket with\ninet_reqsk_clone(), so that the old request socket and its clone\nshare the same ireq_opt, then reqsk_migrate_reset() clears the\npointer in the old one. Another cpu holding a reference on the old\nrequest socket can still be using these options (sending a SYNACK,\nor creating a child in tcp_v4_syn_recv_sock()) when the clone is\nfreed, and tcp_v4_reqsk_destructor() also uses a plain kfree().\n\nReaders already use RCU, and other paths replacing inet_opt\n(do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use\nkfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and\ntcp_v4_reqsk_destructor() as well.\n\nIPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock()\nduplicates the options. tcp_v6_reqsk_destructor() has the same\nmigration issue with ipv6_opt, which is only set by CALIPSO. This\nwill be addressed in a separate patch.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98432" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/11a03ce3c4a62d84c10ccdfe47f8075006498568", "url": "https://git.kernel.org/stable/c/11a03ce3c4a62d84c10ccdfe47f8075006498568" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/26d4c36d318cffbbd160884a0e4cec0da4da4936", "url": "https://git.kernel.org/stable/c/26d4c36d318cffbbd160884a0e4cec0da4da4936" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/742f73df544e03744f2981c467d6542fe8172a2a", "url": "https://git.kernel.org/stable/c/742f73df544e03744f2981c467d6542fe8172a2a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/89b5b1eb7d633c33832b7ff2c02e19a144705036", "url": "https://git.kernel.org/stable/c/89b5b1eb7d633c33832b7ff2c02e19a144705036" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/95a8c8fa9f27dce64c40c41c062de7728bf34ab5", "url": "https://git.kernel.org/stable/c/95a8c8fa9f27dce64c40c41c062de7728bf34ab5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a47406c769f72c070386985488f1c4d057df86b2", "url": "https://git.kernel.org/stable/c/a47406c769f72c070386985488f1c4d057df86b2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b3b027ef0cd322bfa839b9aaf5b27551eea54cf6", "url": "https://git.kernel.org/stable/c/b3b027ef0cd322bfa839b9aaf5b27551eea54cf6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3f33b0a1d89d738e2b913dab519226eaf76e15b", "url": "https://git.kernel.org/stable/c/e3f33b0a1d89d738e2b913dab519226eaf76e15b" } ], "release_date": "2026-10-15T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-10-15T13:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-74550", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: do not send ICMP/NDISC Redirects when peer allocation fails\n\nWhen inet_getpeer_v4() or inet_getpeer_v6() fails to allocate a peer entry\nunder memory pressure or tree size caps, redirect handlers previously fell\nback to sending un-rate-limited ICMP/NDISC Redirect messages.\n\nIn IPv4, ip_rt_send_redirect() called icmp_send() directly when peer == NULL.\nIn IPv6, ip6_forward() and ndisc_send_redirect() passed a NULL peer into\ninet_peer_xrlim_allow(), which returned true when peer == NULL.\n\nBecause ICMP/NDISC Redirects are not part of the default global rate limit\nmask (sysctl_icmp_ratemask), sending redirects when peer == NULL creates\nan un-rate-limited ICMP packet storm.\n\nFix this by failing closed in ip_rt_send_redirect(), ip6_forward(), and\nndisc_send_redirect() when peer is NULL.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74550" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/21666f7af49a90ef44d474916b8ef4402dfd74f5", "url": "https://git.kernel.org/stable/c/21666f7af49a90ef44d474916b8ef4402dfd74f5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5ec5f00fc606a6df8434948c4552b3cb1176595d", "url": "https://git.kernel.org/stable/c/5ec5f00fc606a6df8434948c4552b3cb1176595d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/828f6670d110ff2bf44c743037b38badc315704c", "url": "https://git.kernel.org/stable/c/828f6670d110ff2bf44c743037b38badc315704c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c0adf8b4247bcc5a145a25c1929006eb392580bb", "url": "https://git.kernel.org/stable/c/c0adf8b4247bcc5a145a25c1929006eb392580bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dbc3791e3b2472e1ccc08947e0f83b443470ff4f", "url": "https://git.kernel.org/stable/c/dbc3791e3b2472e1ccc08947e0f83b443470ff4f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f5ecaa7ea7686fa7ecdb6affc9d3a9a42e4524b1", "url": "https://git.kernel.org/stable/c/f5ecaa7ea7686fa7ecdb6affc9d3a9a42e4524b1" } ], "release_date": "2026-08-15T13:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-08-15T13:18:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-64109", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix UAF read of tail->len in unix_stream_data_wait()\n\nunix_stream_data_wait() does skb_peek_tail(&sk->sk_receive_queue) without\nholding any lock that prevents SKBs on that queue from being dequeued and\nfreed.\nThis has been the case since commit 79f632c71bea (\"unix/stream: fix\npeeking with an offset larger than data in queue\").\nThe first consequence of this is that the pointer comparison\n`tail != last` can be false even if `last` semantically refers to an\nalready-freed SKB while `tail` is a new SKB allocated at the same address;\nwhich can cause unix_stream_data_wait() to wrongly keep blocking after new\ndata has arrived, but only in a weird scenario where a peeking recv() and\na normal recv() on the same socket are racing, which is probably not a\nreal problem.\n\nBut since commit 2b514574f7e8 (\"net: af_unix: implement splice for stream\naf_unix sockets\"), `tail` is actually dereferenced, which can cause UAF in\nthe following race scenario (where test_setup() runs single-threaded,\nand afterwards, test_thread1() and test_thread2() run concurrently in\ntwo threads:\n```\nstatic int socks[2];\nvoid test_setup(void) {\n socketpair(AF_UNIX, SOCK_STREAM, 0, socks);\n send(socks[1], \"A\", 1, 0);\n int peekoff = 1;\n setsockopt(socks[0], SOL_SOCKET, SO_PEEK_OFF, &peekoff, sizeof(peekoff));\n}\nvoid test_thread1(void) {\n char dummy;\n recv(socks[0], &dummy, 1, MSG_PEEK);\n}\nvoid test_thread2(void) {\n char dummy;\n recv(socks[0], &dummy, 1, 0);\n shutdown(socks[1], SHUT_WR);\n}\n```\n\nwhen racing like this:\n```\nthread1 thread2\nunix_stream_read_generic\n mutex_lock(&u->iolock)\n skb_peek(&sk->sk_receive_queue)\n skb_peek_next(skb, &sk->sk_receive_queue)\n mutex_unlock(&u->iolock)\n unix_stream_read_generic\n unix_state_lock(sk)\n skb_peek(&sk->sk_receive_queue)\n unix_state_unlock(sk)\n unix_stream_data_wait\n unix_state_lock(sk)\n tail = skb_peek_tail(&sk->sk_receive_queue)\n spin_lock(&sk->sk_receive_queue.lock)\n __skb_unlink(skb, &sk->sk_receive_queue)\n spin_unlock(&sk->sk_receive_queue.lock)\n consume_skb(skb) [frees the SKB]\n `tail != last`: false\n `tail`: true\n `tail->len != last_len` ***UAF***\n```\n\nFix the UAF by removing the read of tail->len; checking tail->len would\nonly make sense if SKBs in the receive queue of a UNIX socket could grow,\nwhich can no longer happen.\n\nKuniyuki explained:\n\n> When commit 869e7c62486e (\"net: af_unix: implement stream sendpage\n> support\") added sendpage() support, data could be appended to the last\n> skb in the receiver's queue.\n>\n> That's why we needed to check if the length of the last skb was changed\n> while waiting for new data in unix_stream_data_wait().\n>\n> However, commit a0dbf5f818f9 (\"af_unix: Support MSG_SPLICE_PAGES\") and\n> commit 57d44a354a43 (\"unix: Convert unix_stream_sendpage() to use\n> MSG_SPLICE_PAGES\") refactored sendmsg(), and now data is always added\n> to a new skb.\n\nThat means this fix is not suitable for kernels before 6.5.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-64109" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/26342087fac93b3932e6af61dc91ec029cb8a623", "url": "https://git.kernel.org/stable/c/26342087fac93b3932e6af61dc91ec029cb8a623" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/38bccb927d83d7d52e5b20015a172a0b6101d11e", "url": "https://git.kernel.org/stable/c/38bccb927d83d7d52e5b20015a172a0b6101d11e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5f162f95a95834f06a8ec6140889272ad12e842f", "url": "https://git.kernel.org/stable/c/5f162f95a95834f06a8ec6140889272ad12e842f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/acdff9907478e82208475b1151700d0b71dcdc63", "url": "https://git.kernel.org/stable/c/acdff9907478e82208475b1151700d0b71dcdc63" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/be309f8eae8b474a4a617eaae01324da996fc719", "url": "https://git.kernel.org/stable/c/be309f8eae8b474a4a617eaae01324da996fc719" } ], "release_date": "2026-07-19T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-07-19T16:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-35864", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in smb2_is_valid_lease_break()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-35864" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/705c76fbf726c7a2f6ff9143d4013b18daaaebf1", "url": "https://git.kernel.org/stable/c/705c76fbf726c7a2f6ff9143d4013b18daaaebf1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a8344e2b69bde63f713b0aa796d70dbeadffddfb", "url": "https://git.kernel.org/stable/c/a8344e2b69bde63f713b0aa796d70dbeadffddfb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c868cabdf6fdd61bea54532271f4708254e57fc5", "url": "https://git.kernel.org/stable/c/c868cabdf6fdd61bea54532271f4708254e57fc5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f92739fdd4522c4291277136399353d7c341fae4", "url": "https://git.kernel.org/stable/c/f92739fdd4522c4291277136399353d7c341fae4" } ], "release_date": "2024-05-19T08:34:22Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-05-19T08:34:22Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-41013", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't walk off the end of a directory data block\n\nThis adds sanity checks for xfs_dir2_data_unused and xfs_dir2_data_entry\nto make sure don't stray beyond valid memory region. Before patching, the\nloop simply checks that the start offset of the dup and dep is within the\nrange. So in a crafted image, if last entry is xfs_dir2_data_unused, we\ncan change dup->length to dup->length-1 and leave 1 byte of space. In the\nnext traversal, this space will be considered as dup or dep. We may\nencounter an out of bound read when accessing the fixed members.\n\nIn the patch, we make sure that the remaining bytes large enough to hold\nan unused entry before accessing xfs_dir2_data_unused and\nxfs_dir2_data_unused is XFS_DIR2_DATA_ALIGN byte aligned. We also make\nsure that the remaining bytes large enough to hold a dirent with a\nsingle-byte name before accessing xfs_dir2_data_entry.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-41013" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0c7fcdb6d06cdf8b19b57c17605215b06afa864a", "url": "https://git.kernel.org/stable/c/0c7fcdb6d06cdf8b19b57c17605215b06afa864a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b0932e4f9da85349d1c8f2a77d2a7a7163b8511d", "url": "https://git.kernel.org/stable/c/b0932e4f9da85349d1c8f2a77d2a7a7163b8511d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ca96d83c93071f95cf962ce92406621a472df31b", "url": "https://git.kernel.org/stable/c/ca96d83c93071f95cf962ce92406621a472df31b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2024-07-29T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-07-29T07:15:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53577", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, cpumap: Make sure kthread is running before map update returns\n\nThe following warning was reported when running stress-mode enabled\nxdp_redirect_cpu with some RT threads:\n\n ------------[ cut here ]------------\n WARNING: CPU: 4 PID: 65 at kernel/bpf/cpumap.c:135\n CPU: 4 PID: 65 Comm: kworker/4:1 Not tainted 6.5.0-rc2+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\n Workqueue: events cpu_map_kthread_stop\n RIP: 0010:put_cpu_map_entry+0xda/0x220\n ......\n Call Trace:\n \n ? show_regs+0x65/0x70\n ? __warn+0xa5/0x240\n ......\n ? put_cpu_map_entry+0xda/0x220\n cpu_map_kthread_stop+0x41/0x60\n process_one_work+0x6b0/0xb80\n worker_thread+0x96/0x720\n kthread+0x1a5/0x1f0\n ret_from_fork+0x3a/0x70\n ret_from_fork_asm+0x1b/0x30\n \n\nThe root cause is the same as commit 436901649731 (\"bpf: cpumap: Fix memory\nleak in cpu_map_update_elem\"). The kthread is stopped prematurely by\nkthread_stop() in cpu_map_kthread_stop(), and kthread() doesn't call\ncpu_map_kthread_run() at all but XDP program has already queued some\nframes or skbs into ptr_ring. So when __cpu_map_ring_cleanup() checks\nthe ptr_ring, it will find it was not emptied and report a warning.\n\nAn alternative fix is to use __cpu_map_ring_cleanup() to drop these\npending frames or skbs when kthread_stop() returns -EINTR, but it may\nconfuse the user, because these frames or skbs have been handled\ncorrectly by XDP program. So instead of dropping these frames or skbs,\njust make sure the per-cpu kthread is running before\n__cpu_map_entry_alloc() returns.\n\nAfter apply the fix, the error handle for kthread_stop() will be\nunnecessary because it will always return 0, so just remove it.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53577" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/640a604585aa30f93e39b17d4d6ba69fcb1e66c9", "url": "https://git.kernel.org/stable/c/640a604585aa30f93e39b17d4d6ba69fcb1e66c9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7a1178a3671b40746830d355836b72e47ceb2490", "url": "https://git.kernel.org/stable/c/7a1178a3671b40746830d355836b72e47ceb2490" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b44d28b98f185d2f2348aa3c3636838c316f889e", "url": "https://git.kernel.org/stable/c/b44d28b98f185d2f2348aa3c3636838c316f889e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ecb45b852af5e88257020b88bea5ff0798d72aca", "url": "https://git.kernel.org/stable/c/ecb45b852af5e88257020b88bea5ff0798d72aca" } ], "release_date": "2025-10-04T15:17:16Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2025-10-04T15:17:16Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-47200", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/prime: Fix use after free in mmap with drm_gem_ttm_mmap\n\ndrm_gem_ttm_mmap() drops a reference to the gem object on success. If\nthe gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that\ndrop will free the gem object, and the subsequent drm_gem_object_get()\nwill be a UAF. Fix by grabbing a reference before calling the mmap\nhelper.\n\nThis issue was forseen when the reference dropping was adding in\ncommit 9786b65bc61ac (\"drm/ttm: fix mmap refcounting\"):\n \"For that to work properly the drm_gem_object_get() call in\n drm_gem_ttm_mmap() must be moved so it happens before calling\n obj->funcs->mmap(), otherwise the gem refcount would go down\n to zero.\"", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-47200" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4f8e469a2384dfa4047145b0093126462cbb6dc0", "url": "https://git.kernel.org/stable/c/4f8e469a2384dfa4047145b0093126462cbb6dc0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8244a3bc27b3efd057da154b8d7e414670d5044f", "url": "https://git.kernel.org/stable/c/8244a3bc27b3efd057da154b8d7e414670d5044f" } ], "release_date": "2024-04-10T18:56:35Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-04-10T18:56:35Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-35939", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-direct: Leak pages on dma_set_decrypted() failure\n\nOn TDX it is possible for the untrusted host to cause\nset_memory_encrypted() or set_memory_decrypted() to fail such that an\nerror is returned and the resulting memory is shared. Callers need to\ntake care to handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional or security\nissues.\n\nDMA could free decrypted/shared pages if dma_set_decrypted() fails. This\nshould be a rare case. Just leak the pages in this case instead of\nfreeing them.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-35939" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a", "url": "https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9", "url": "https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c", "url": "https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf", "url": "https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf" } ], "release_date": "2024-05-19T10:10:44Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-05-19T10:10:44Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-89564", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: orphan prefetched skbs before multicast forwarding\n\nIPv4 and IPv6 input preserve an skb->sk association installed by\nbpf_sk_assign() so that local delivery can use the selected socket under\nRCU. Both address families can also prefetch a socket in UDP early demux.\nIn both paths (BPF and UDP early demux) a reference is not guaranteed to\nbe held on the socket.\n\nWhen a multicast packet is not locally deliverable, IPv6 hands the\noriginal skb to ip6_mr_input(). IPv4's ip_mr_input() similarly keeps the\noriginal skb when local delivery is not needed. Either path can put the\nskb on an unresolved multicast route queue or forward it after the\nreceive-side RCU section ends.\n\nAfter the prefetched socket is destroyed, a later skb free invokes\nsock_pfree() and dereferences the stale skb->sk. Orphan the skb before\neach non-local multicast forwarding path. Local delivery retains the\noriginal skb; the existing skb_clone() calls provide multicast forwarding\nwith a socket-free clone.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-89564" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a8af6fbac895f057c4b8ff8a2e3fb4c5827fe4ce", "url": "https://git.kernel.org/stable/c/a8af6fbac895f057c4b8ff8a2e3fb4c5827fe4ce" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e36ce6e78fe3fc3c071a26750783b7ba081ce10d", "url": "https://git.kernel.org/stable/c/e36ce6e78fe3fc3c071a26750783b7ba081ce10d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e62aef7d6a5b27569bf540bbe11a9482117ff588", "url": "https://git.kernel.org/stable/c/e62aef7d6a5b27569bf540bbe11a9482117ff588" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f1281d4b99089fbaf0d3579bba62a814ebb4de4d", "url": "https://git.kernel.org/stable/c/f1281d4b99089fbaf0d3579bba62a814ebb4de4d" } ], "release_date": "2026-09-11T19:44:35Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-09-11T19:44:35Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-89550", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: svcauth_gss: enforce krb5 token minimum length\n\nsvcauth_gss_unwrap_priv() validates only an upper bound on the\nwire-supplied opaque length before handing the buffer to\ngss_unwrap():\n\n if (len > xdr_stream_remaining(xdr))\n goto unwrap_failed;\n offset = xdr_stream_pos(xdr);\n ...\n maj_stat = gss_unwrap(ctx, offset, offset + len, buf);\n\nThe wire value `len` flows unchanged as the upper bound into the\nkrb5 unwrap path, so a len in [0, 16] passes this check and is\nhanded to gss_unwrap(). For a krb5 v2 context that lands in\ngss_krb5_unwrap_v2(), which reads the 16-byte RFC 4121 token\nheader fields at ptr+4 and ptr+6 and then calls rotate_left()\nbefore any integrity check. With a sub-header length the header\nreads run past the token, and _rotate_left()'s `shift %= buf->len`\npath can divide by zero when buf->len has been driven to zero by\nthe truncated token. A header-only token (len == 16) is equally\ninvalid: with a non-zero RRC field and the opaque blob ending at\nthe XDR buffer boundary, rotate_left() builds a zero-length\nsubbuffer, reaching the same division.\n\nReject the token at the server entry point before it reaches the\nkrb5 unwrap core. A valid sealed RFC 4121 token must contain\nthe 16-byte header plus at least some encrypted payload.\n\nFix by adding a minimum-length check immediately after the\nexisting upper-bound check:\n\n if (len <= GSS_KRB5_TOK_HDR_LEN)\n goto unwrap_failed;", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-89550" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0ea5b0c7f212c2772d32c2b88287b89a9cdf6edd", "url": "https://git.kernel.org/stable/c/0ea5b0c7f212c2772d32c2b88287b89a9cdf6edd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2eed1e6a976a44015c3ee78841fe336796e2b21c", "url": "https://git.kernel.org/stable/c/2eed1e6a976a44015c3ee78841fe336796e2b21c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a919c5c88769cf8fb3ec071e6078d830bf512489", "url": "https://git.kernel.org/stable/c/a919c5c88769cf8fb3ec071e6078d830bf512489" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dd6afc6cab8c5d387d1ed2f069562ef7bdadd651", "url": "https://git.kernel.org/stable/c/dd6afc6cab8c5d387d1ed2f069562ef7bdadd651" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de942dd8c2c8358bcad04ce44271954c48924423", "url": "https://git.kernel.org/stable/c/de942dd8c2c8358bcad04ce44271954c48924423" } ], "release_date": "2026-09-11T20:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-09-11T20:19:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-89537", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2\n\ngss_krb5_verify_mic_v2() reads the token ID at ptr[0..1], the flags\nbyte at ptr[2], and padding at ptr[3..7], then passes\nptr + GSS_KRB5_TOK_HDR_LEN and cksum_len to gss_krb5_mic_build_sg().\nNone of these accesses check read_token->len first.\n\nThe minimum safe token size is GSS_KRB5_TOK_HDR_LEN (16) plus\nctx->krb5e->cksum_len (12-24, depending on the enctype). All callers\naccept shorter tokens from the wire:\n\n - gss_unwrap_resp_integ() enforces only an upper bound\n (offset + len <= rcv_buf->len) before allocating\n mic.data = kmalloc(len) and passing it to gss_verify_mic().\n A malicious NFS server can therefore supply a short checksum\n opaque, producing a small slab allocation that the Kerberos MIC\n verifier reads past.\n\n - gss_validate() enforces only len <= RPC_MAX_AUTH_SIZE (400)\n before passing the wire-supplied length to\n gss_validate_seqno_mic(), which constructs a mic xdr_netobj\n and calls gss_verify_mic().\n\n - svcauth_gss_verify_header() enforces only\n checksum.len >= XDR_UNIT (4 bytes) before dispatching to\n gss_verify_mic().\n\n - svcauth_gss_unwrap_integ() checks only that the checksum fits\n in gsd->gsd_scratch.\n\nAdd a length guard at the top of gss_krb5_verify_mic_v2(), before any\nptr[] access or scatterlist construction. Well-formed MIC tokens from\ngss_krb5_get_mic_v2() already have exactly GSS_KRB5_TOK_HDR_LEN +\ncksum_len bytes, so valid traffic is unaffected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-89537" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7a946b2e7207f968902f2147ab9b30726f82f7ab", "url": "https://git.kernel.org/stable/c/7a946b2e7207f968902f2147ab9b30726f82f7ab" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/996dd15f60121bdd7896b4554458f8806d608063", "url": "https://git.kernel.org/stable/c/996dd15f60121bdd7896b4554458f8806d608063" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b94f6719dcd9f7a609bc5f459f85795900e77d25", "url": "https://git.kernel.org/stable/c/b94f6719dcd9f7a609bc5f459f85795900e77d25" } ], "release_date": "2026-09-11T19:44:15Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-09-11T19:44:15Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-64424", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetpoll: fix a use-after-free on shutdown path\n\nThere is a use-after-free error on netpoll, which is clearly detected by\nKASAN.\n\n BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3b/0x80\n Read of size 1 at addr ... by task kworker/9:1\n Workqueue: events queue_process\n Call Trace:\n skb_dequeue+0x1e/0xb0\n queue_process+0x2c/0x600\n process_scheduled_works+0x4b6/0x850\n worker_thread+0x414/0x5a0\n Allocated by task 242:\n __netpoll_setup+0x201/0x4a0\n netpoll_setup+0x249/0x550\n enabled_store+0x32f/0x380\n Freed by task 0:\n kfree+0x1b7/0x540\n rcu_core+0x3f8/0x7a0\n\nThe problem happens when there is a pending TX worker running in\nparallel with the cleanup path.\n\nThis is what happens on netpoll shutdown path:\n\n1) __netpoll_cleanup() is called\n2) set dev->npinfo to NULL\n3) call_rcu() with rcu_cleanup_netpoll_info()\n 3.1) rcu_cleanup_netpoll_info() tries to cancel all workers with\n cancel_delayed_work(), but doesn't wait for the worker to finish\n4) and kfree(npinfo);\n\nBecause 3.1) doesn't really cancel the work, as the comment says \"we\ncan't call cancel_delayed_work_sync here, as we are in softirq\", the TX\nworker can run after 4).\n\nTl;DR: queue_process() is not an RCU reader, it reaches npinfo through\nthe work item via container_of().\n\nUse disable_delayed_work_sync() to ensure the worker is completely\nstopped and prevent any future re-arming attempts. Once npinfo is set\nto NULL, senders will bail out and not queue new work. The disable flag\nensures any in-flight re-arming attempts also fail silently.\n\nIn the future, we can do the cleanup inline here without needing the\nnpinfo->rcu rcu_head, but that is net-next material.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-64424" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/45f1458a85017a023f138b22ac5c76abd477db42", "url": "https://git.kernel.org/stable/c/45f1458a85017a023f138b22ac5c76abd477db42" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5ed09a108d93a3b002cc79823d9455b50c4a8be7", "url": "https://git.kernel.org/stable/c/5ed09a108d93a3b002cc79823d9455b50c4a8be7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/95ecc5b58042f6b6743b589e6588f1cd7ba336aa", "url": "https://git.kernel.org/stable/c/95ecc5b58042f6b6743b589e6588f1cd7ba336aa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a33f37f8d079da7236ed7b7e2aed2a34ab81e7cf", "url": "https://git.kernel.org/stable/c/a33f37f8d079da7236ed7b7e2aed2a34ab81e7cf" } ], "release_date": "2026-07-25T10:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-07-25T10:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-46266", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP\n\nYizhou Zhao reported that simply having one RAW socket on protocol\nIPPROTO_RAW (255) was dangerous.\n\n socket(AF_INET, SOCK_RAW, 255);\n\nA malicious incoming ICMP packet can set the protocol field to 255\nand match this socket, leading to FNHE cache changes.\n\ninner = IP(src=\"192.168.2.1\", dst=\"8.8.8.8\", proto=255)/Raw(\"TEST\")\npkt = IP(src=\"192.168.1.1\", dst=\"192.168.2.1\")/ICMP(type=3, code=4, nexthopmtu=576)/inner\n\n\"man 7 raw\" states:\n\n A protocol of IPPROTO_RAW implies enabled IP_HDRINCL and is able\n to send any IP protocol that is specified in the passed header.\n Receiving of all IP protocols via IPPROTO_RAW is not possible\n using raw sockets.\n\nMake sure we drop these malicious packets.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46266" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/19e42490c89bac9a388f28179e66bebbef350f99", "url": "https://git.kernel.org/stable/c/19e42490c89bac9a388f28179e66bebbef350f99" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/47276297140ee6712646f9b19fb04fe26daedd01", "url": "https://git.kernel.org/stable/c/47276297140ee6712646f9b19fb04fe26daedd01" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/531c1aec81bfe19d00af13da5531fbb8209e4bd2", "url": "https://git.kernel.org/stable/c/531c1aec81bfe19d00af13da5531fbb8209e4bd2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/719d3932b8f6e3348ce2f0ac58e278301fc17575", "url": "https://git.kernel.org/stable/c/719d3932b8f6e3348ce2f0ac58e278301fc17575" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c89477ad79446867394360b29bb801010fc3ff22", "url": "https://git.kernel.org/stable/c/c89477ad79446867394360b29bb801010fc3ff22" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/db76b75ede3810e7cf9cfea5067d4f3e0993768b", "url": "https://git.kernel.org/stable/c/db76b75ede3810e7cf9cfea5067d4f3e0993768b" } ], "release_date": "2026-06-03T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-06-03T18:16:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-99999", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn't allow such packets in, but as a defence\nin depth measure, let's also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-99999" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a", "url": "https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb", "url": "https://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822", "url": "https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf", "url": "https://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956", "url": "https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b", "url": "https://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326", "url": "https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0", "url": "https://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0" }, { "category": "external", "summary": "https://pwn.ai/blog/pwnescape", "url": "https://pwn.ai/blog/pwnescape" }, { "category": "external", "summary": "https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge", "url": "https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/10/15/5", "url": "http://www.openwall.com/lists/oss-security/2026/10/15/5" } ], "release_date": "2026-10-15T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-10-15T13:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-31527", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndriver core: platform: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus' match()\ncallback is called without the device lock held, thus accessing the\ndriver_override field without a lock, which can cause a UAF.\n\nFix this by using the driver-core driver_override infrastructure taking\ncare of proper locking internally.\n\nNote that calling match() from __driver_attach() without the device lock\nheld is intentional. [1]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-31527" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2b38efc05bf7a8568ec74bfffea0f5cfa62bc01d", "url": "https://git.kernel.org/stable/c/2b38efc05bf7a8568ec74bfffea0f5cfa62bc01d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/492349e5e4a369a8b62781100a3ade470bf1ce6b", "url": "https://git.kernel.org/stable/c/492349e5e4a369a8b62781100a3ade470bf1ce6b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7c02a9bd7d14a89065fcf672b86d8e1d1a41d3b1", "url": "https://git.kernel.org/stable/c/7c02a9bd7d14a89065fcf672b86d8e1d1a41d3b1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9a6086d2a828dd2ff74cf9abcae456670febd71f", "url": "https://git.kernel.org/stable/c/9a6086d2a828dd2ff74cf9abcae456670febd71f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/edee7ee5a14c3b33f6d54641f5af5c5e9180992d", "url": "https://git.kernel.org/stable/c/edee7ee5a14c3b33f6d54641f5af5c5e9180992d" } ], "release_date": "2026-04-22T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-04-22T14:16:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-90111", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6mr: do not clone dst in ip6mr_cache_report()\n\nIPv6 input attaches a non-refcounted (NOREF) dst to skbs under RCU.\nWhen an ingress multicast packet misses MFC lookup,\nip6mr_cache_unresolved() places the skb onto the unresolved queue,\nescaping the receive-side RCU grace period.\n\nIf the underlying route is deleted and freed, and the MFC queue is later\nresolved with a wrong parent interface, ip6_mr_forward() invokes\nip6mr_cache_report(..., MRT6MSG_WRONGMIF), which executes\ndst_clone(skb_dst(pkt)) on the freed dst entry, triggering a slab\nuse-after-free.\n\nReport packets queued to mroute6_sk (a raw socket) and netlink\nnotifications do not require an attached dst entry.\n\nFix this by:\n1. Removing dst_clone() in ip6mr_cache_report() and ensuring report skbs\n do not hold a dst.\n2. Dropping skb_dst before queuing unresolved skbs in\n ip6mr_cache_unresolved(), matching the fact that multicast\n forwarding resolves outgoing routes anew via ip6_route_output().", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-90111" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/235b42b5860189eb8c27c36435ad932cae65a734", "url": "https://git.kernel.org/stable/c/235b42b5860189eb8c27c36435ad932cae65a734" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4a674afaae4136c71943aa3e35d433676fd40e8f", "url": "https://git.kernel.org/stable/c/4a674afaae4136c71943aa3e35d433676fd40e8f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f57b0fd1c62e1be274ee154ab7fb8ac4481b7f89", "url": "https://git.kernel.org/stable/c/f57b0fd1c62e1be274ee154ab7fb8ac4481b7f89" } ], "release_date": "2026-09-17T16:06:18Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-09-17T16:06:18Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-68426", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: fix stale skb->prev after async crypto steals a GSO segment\n\nskb_gso_segment() leaves the segment list head with ->prev pointing at\nthe last segment, an invariant validate_xmit_skb_list() relies on when\nit sets its tail pointer (tail = skb->prev).\n\nWhen validate_xmit_xfrm() walks a GSO list and some segments are stolen\nby async crypto (->xmit() returns -EINPROGRESS), those segments are\nunlinked from the list but the head ->prev is never updated. If the\nlast segment is the one stolen, the returned head still has ->prev\npointing at it, even though it is now owned by the crypto engine and may\nbe freed. validate_xmit_skb_list() later does tail->next = skb, writing\nthrough that stale pointer -- a use-after-free.\n\nRepoint skb->prev at the last retained segment before returning.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-68426" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/33e1b0d25ca0d2818c635ff80e6aa0d295e08a98", "url": "https://git.kernel.org/stable/c/33e1b0d25ca0d2818c635ff80e6aa0d295e08a98" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f4c3919baf0944ad96580467c302bc6c7758b00", "url": "https://git.kernel.org/stable/c/3f4c3919baf0944ad96580467c302bc6c7758b00" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bbca7cc3b2b4b10afbfee99b81d9ee78f5423046", "url": "https://git.kernel.org/stable/c/bbca7cc3b2b4b10afbfee99b81d9ee78f5423046" } ], "release_date": "2026-08-10T12:04:46Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-08-10T12:04:46Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-53120", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus' match()\ncallback is called without the device lock held, thus accessing the\ndriver_override field without a lock, which can cause a UAF.\n\nFix this by using the driver-core driver_override infrastructure taking\ncare of proper locking internally.\n\nNote that calling match() from __driver_attach() without the device lock\nheld is intentional. [1]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53120" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/10a4206a24013be4d558d476010cbf2eb4c9fa64", "url": "https://git.kernel.org/stable/c/10a4206a24013be4d558d476010cbf2eb4c9fa64" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/58a42be0d70307d765594fc581f5f5e5ef059712", "url": "https://git.kernel.org/stable/c/58a42be0d70307d765594fc581f5f5e5ef059712" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c5b2c5755495507e14f310c2653c85de0a309b1f", "url": "https://git.kernel.org/stable/c/c5b2c5755495507e14f310c2653c85de0a309b1f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dfe950d9464cad609f3b118c6203e2708055bc61", "url": "https://git.kernel.org/stable/c/dfe950d9464cad609f3b118c6203e2708055bc61" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fdfa287956d00b936e0ac409b21e4f90501ad109", "url": "https://git.kernel.org/stable/c/fdfa287956d00b936e0ac409b21e4f90501ad109" } ], "release_date": "2026-06-24T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-06-24T17:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-50063", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Prevent tail call between progs attached to different hooks\n\nbpf progs can be attached to kernel functions, and the attached functions\ncan take different parameters or return different return values. If\nprog attached to one kernel function tail calls prog attached to another\nkernel function, the ctx access or return value verification could be\nbypassed.\n\nFor example, if prog1 is attached to func1 which takes only 1 parameter\nand prog2 is attached to func2 which takes two parameters. Since verifier\nassumes the bpf ctx passed to prog2 is constructed based on func2's\nprototype, verifier allows prog2 to access the second parameter from\nthe bpf ctx passed to it. The problem is that verifier does not prevent\nprog1 from passing its bpf ctx to prog2 via tail call. In this case,\nthe bpf ctx passed to prog2 is constructed from func1 instead of func2,\nthat is, the assumption for ctx access verification is bypassed.\n\nAnother example, if BPF LSM prog1 is attached to hook file_alloc_security,\nand BPF LSM prog2 is attached to hook bpf_lsm_audit_rule_known. Verifier\nknows the return value rules for these two hooks, e.g. it is legal for\nbpf_lsm_audit_rule_known to return positive number 1, and it is illegal\nfor file_alloc_security to return positive number. So verifier allows\nprog2 to return positive number 1, but does not allow prog1 to return\npositive number. The problem is that verifier does not prevent prog1\nfrom calling prog2 via tail call. In this case, prog2's return value 1\nwill be used as the return value for prog1's hook file_alloc_security.\nThat is, the return value rule is bypassed.\n\nThis patch adds restriction for tail call to prevent such bypasses.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-50063" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/28ead3eaabc16ecc907cfb71876da028080f6356", "url": "https://git.kernel.org/stable/c/28ead3eaabc16ecc907cfb71876da028080f6356" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1", "url": "https://git.kernel.org/stable/c/5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1", "url": "https://git.kernel.org/stable/c/88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d9a807fb7cbfad4328824186e2e4bee28f72169b", "url": "https://git.kernel.org/stable/c/d9a807fb7cbfad4328824186e2e4bee28f72169b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html" } ], "release_date": "2024-10-21T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2024-10-21T20:15:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-52956", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()\n\nIn __ceph_x_decrypt(), a part of the buffer p is interpreted as a\nceph_x_encrypt_header, and the magic field of this struct is accessed.\nThis happens without any guarantee that the buffer is large enough to\nhold this struct. The function parameter ciphertext_len represents the\nlength of the ciphertext to decrypt and is guaranteed to be at most the\nremaining size of the allocated buffer p. However, this value is not\nnecessarily greater than sizeof(ceph_x_encrypt_header). E.g., a message\nframe of type FRAME_TAG_AUTH_REPLY_MORE, that is just as long to hold\nthe ciphertext at its end with a ciphertext_len of 8 or less, can\ntrigger an out-of-bounds memory access when accessing hdr->magic.\n\nThis patch fixes the issue by adding a check to ensure that the\ndecrypted plaintext in the buffer is large enough to represent at least\nthe ceph_x_encrypt_header.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-52956" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5df268406ef38d0f92547959296577c7077dacdc", "url": "https://git.kernel.org/stable/c/5df268406ef38d0f92547959296577c7077dacdc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/759053333a40c6997c2917dcd6160bfe40d2b42e", "url": "https://git.kernel.org/stable/c/759053333a40c6997c2917dcd6160bfe40d2b42e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/821365487aa58d06bda65c676ba215d506ba9768", "url": "https://git.kernel.org/stable/c/821365487aa58d06bda65c676ba215d506ba9768" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c7e9b53aebe401970f1b5f5a01b4e021b18e8bb2", "url": "https://git.kernel.org/stable/c/c7e9b53aebe401970f1b5f5a01b4e021b18e8bb2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ebc7eddf6225b87e3aae720875f9dd40cb6b1cef", "url": "https://git.kernel.org/stable/c/ebc7eddf6225b87e3aae720875f9dd40cb6b1cef" } ], "release_date": "2026-06-24T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2026-06-24T17:17:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-68188", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()\n\nUse RCU to avoid a pair of atomic operations and a potential\nUAF on dst_dev()->flags.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-68188" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/06da08d9355bf8e2070459bbedbe372ccc02cc0e", "url": "https://git.kernel.org/stable/c/06da08d9355bf8e2070459bbedbe372ccc02cc0e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b62a59c18b692f892dcb8109c1c2e653b2abc95c", "url": "https://git.kernel.org/stable/c/b62a59c18b692f892dcb8109c1c2e653b2abc95c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bc2b881a0896c111c1041d8bb1f92a3b3873ace5", "url": "https://git.kernel.org/stable/c/bc2b881a0896c111c1041d8bb1f92a3b3873ace5" } ], "release_date": "2025-12-16T13:43:10Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2025-12-16T13:43:10Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53111", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nloop: Fix use-after-free issues\n\ndo_req_filebacked() calls blk_mq_complete_request() synchronously or\nasynchronously when using asynchronous I/O unless memory allocation fails.\nHence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor\n'rq' after do_req_filebacked() finished unless we are sure that the request\nhas not yet been completed. This patch fixes the following kernel crash:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000054\nCall trace:\n css_put.42938+0x1c/0x1ac\n loop_process_work+0xc8c/0xfd4\n loop_rootcg_workfn+0x24/0x34\n process_one_work+0x244/0x558\n worker_thread+0x400/0x8fc\n kthread+0x16c/0x1e0\n ret_from_fork+0x10/0x20", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "known_affected": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53111" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/407badf73ec9fb0d5744bf2ca1745c1818aa222f", "url": "https://git.kernel.org/stable/c/407badf73ec9fb0d5744bf2ca1745c1818aa222f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6917395c4667cfb607ed8bf1826205a59414657c", "url": "https://git.kernel.org/stable/c/6917395c4667cfb607ed8bf1826205a59414657c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9b0cb770f5d7b1ff40bea7ca385438ee94570eec", "url": "https://git.kernel.org/stable/c/9b0cb770f5d7b1ff40bea7ca385438ee94570eec" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3fda704903f6d1fc351412f1bc6620333959ada", "url": "https://git.kernel.org/stable/c/e3fda704903f6d1fc351412f1bc6620333959ada" } ], "release_date": "2025-05-02T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-19T09:19:41.057926Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.272-271.1109.amzn2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792401579" }, { "category": "none_available", "date": "2025-05-02T16:15:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:bpftool-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-headers-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:kernel-tools-devel-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els1.x86_64", "Amazon-Linux-2:python-perf-0:5.10.259-258.1046.amzn2.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }