🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2026-137 Related CVEs: CVE-2026-43284 CVE-2026-31431 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3257 Related CVEs: CVE-2026-5121 CVE-2025-5914 CVE-2019-18408 CVE-2025-5917 CVE-2021-31566 CVE-2017-14503 CVE-2018-1000877 CVE-2018-1000878 +3 more Upstream summary: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1911 Related CVEs: CVE-2022-35737 CVE-2019-13734 CVE-2025-6965 Upstream summary: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1415 Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers to corrupt […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-065 Related CVEs: CVE-2025-23244 Upstream summary: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1648 Related CVEs: CVE-2026-25547 CVE-2026-27135 CVE-2024-36137 CVE-2026-21710 CVE-2026-21713 CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 +12 more Upstream summary: @isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1689 Related CVEs: CVE-2026-6357 CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-8869 CVE-2025-50181 CVE-2001-1267 CVE-2007-4559 +5 more Upstream summary: pip prior to version 26.1 would run self-update check functionality after installing wheel files which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3092 Related CVEs: CVE-2025-54514 CVE-2025-62626 CVE-2023-31315 CVE-2017-5715 CVE-2023-20593 Upstream summary: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3179 Related CVEs: CVE-2026-2604 CVE-2019-3890 Upstream summary: The Evolution backend server exposes the D-Bus service org.gnome.evolution.dataserver.AddressBook, that can be used in order to manage contacts. A Flatpak application with access […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3275 Related CVEs: CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 +12 more Upstream summary: Potential use-after-free in DANE client code (CVE-2026-28387) NULL Pointer Dereference When Processing a Delta CRL […]
