Amazon Linux 2 — cloud-init — multiple vulnerabilities (7 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2926 Related CVEs: CVE-2024-6174 CVE-2023-1786 CVE-2021-3429 CVE-2019-0816 CVE-2018-10896 CVE-2020-8631 CVE-2020-8632 Upstream summary: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP […]