🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2122 Related CVEs: CVE-2023-37327 CVE-2026-1940 CVE-2021-3497 Upstream summary: Integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327) Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3282 Related CVEs: CVE-2026-41651 CVE-2018-1106 CVE-2024-0217 Upstream summary: PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1731 Related CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 +12 more Upstream summary: No versions of an Amazon Linux Java Virtual Machine (JVM) are affected by CVE-2021-44228 or […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-163 Related CVEs: CVE-2025-23248 CVE-2025-23255 CVE-2025-23271 CVE-2025-23273 CVE-2025-23274 CVE-2025-23275 CVE-2025-23308 CVE-2025-23338 +3 more Upstream summary: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1601 Related CVEs: CVE-2026-34078 CVE-2026-34079 CVE-2024-42472 CVE-2024-32462 Upstream summary: A complete sandbox escape vulnerability exists in Flatpak before 1.16.4. The Flatpak portal accepts paths in the sandbox-expose options which can […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-239 Related CVEs: CVE-2025-21991 CVE-2025-22004 CVE-2025-21858 CVE-2025-21796 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) In […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1307 Related CVEs: CVE-2025-54514 CVE-2025-62626 CVE-2023-31315 CVE-2023-20593 Upstream summary: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1685 Related CVEs: CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 CVE-2026-34282 CVE-2026-21925 +12 more Upstream summary: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3235 Related CVEs: CVE-2026-4775 CVE-2025-61143 CVE-2025-61144 CVE-2025-9900 CVE-2023-6277 CVE-2022-1355 CVE-2022-3970 CVE-2022-2867 +12 more Upstream summary: A flaw was found in the libtiff library. A remote attacker could exploit a signed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1533 Related CVEs: CVE-2026-1519 CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 CVE-2025-40777 CVE-2024-11187 CVE-2024-12705 CVE-2024-1737 +12 more Upstream summary: If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the […]
