🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2026-137 Related CVEs: CVE-2026-43284 CVE-2026-31431 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1415 Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers to corrupt […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-065 Related CVEs: CVE-2025-23244 Upstream summary: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1648 Related CVEs: CVE-2026-25547 CVE-2026-27135 CVE-2024-36137 CVE-2026-21710 CVE-2026-21713 CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 +12 more Upstream summary: @isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1689 Related CVEs: CVE-2026-6357 CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-8869 CVE-2025-50181 CVE-2001-1267 CVE-2007-4559 +5 more Upstream summary: pip prior to version 26.1 would run self-update check functionality after installing wheel files which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1680 Related CVEs: CVE-2026-40355 CVE-2026-40356 CVE-2025-24528 CVE-2025-3576 CVE-2024-37370 CVE-2024-37371 CVE-2024-26458 CVE-2024-26461 +3 more Upstream summary: In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1418 Related CVEs: CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2025-50181 CVE-2024-37891 CVE-2023-43804 Upstream summary: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1563 Related CVEs: CVE-2026-33416 CVE-2026-33636 CVE-2025-66293 CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2026-34757 +5 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-154 Related CVEs: CVE-2025-23248 CVE-2025-23255 CVE-2025-23271 CVE-2025-23273 CVE-2025-23274 CVE-2025-23275 CVE-2025-23308 CVE-2025-23338 +3 more Upstream summary: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1686 Related CVEs: CVE-2026-22007 CVE-2026-22008 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 CVE-2026-34282 +7 more Upstream summary: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product […]
