Amazon Linux Publishes Thirty-Five Live Patches for CVE-2026-80521

09/30/2026 Last updated : 10/02/2026 Tech Guru
P2 — VALIDATE AND UPDATEImportant · Not provided by the authorityEXPLOITATION: NOT STATED

Quick Answer

Amazon Linux published 35 advisories for Thirty-five Amazon Linux 2023 kernel live-patch streams. Match the installed package stream to the exact advisory, apply its supported fixed build, validate runtime and service health, and retain package and change evidence.

Confirm Scope And Apply The Supported Fix

What to do now: Identify affected Amazon Linux 2023 instances and installed package builds, select only the exact matching advisory, apply its fixed package through supported repositories, validate runtime and workload health, and preserve evidence.

Open the authoritative advisory

Last verified: 2026-10-01 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.

Scope And Authority

Product scopeThirty-five Amazon Linux 2023 kernel live-patch streams
AdvisoryALAS2023LIVEPATCH-2026-389 / ALAS2023LIVEPATCH-2026-390 / ALAS2023LIVEPATCH-2026-391 / ALAS2023LIVEPATCH-2026-392 / ALAS2023LIVEPATCH-2026-393 / ALAS2023LIVEPATCH-2026-394 / ALAS2023LIVEPATCH-2026-395 / ALAS2023LIVEPATCH-2026-396 / ALAS2023LIVEPATCH-2026-397 / ALAS2023LIVEPATCH-2026-398 / ALAS2023LIVEPATCH-2026-399 / ALAS2023LIVEPATCH-2026-400 / ALAS2023LIVEPATCH-2026-401 / ALAS2023LIVEPATCH-2026-402 / ALAS2023LIVEPATCH-2026-403 / ALAS2023LIVEPATCH-2026-404 / ALAS2023LIVEPATCH-2026-405 / ALAS2023LIVEPATCH-2026-406 / ALAS2023LIVEPATCH-2026-407 / ALAS2023LIVEPATCH-2026-408 / ALAS2023LIVEPATCH-2026-409 / ALAS2023LIVEPATCH-2026-410 / ALAS2023LIVEPATCH-2026-411 / ALAS2023LIVEPATCH-2026-412 / ALAS2023LIVEPATCH-2026-413 / ALAS2023LIVEPATCH-2026-414 / ALAS2023LIVEPATCH-2026-415 / ALAS2023LIVEPATCH-2026-416 / ALAS2023LIVEPATCH-2026-417 / ALAS2023LIVEPATCH-2026-418 / ALAS2023LIVEPATCH-2026-419 / ALAS2023LIVEPATCH-2026-420 / ALAS2023LIVEPATCH-2026-421 / ALAS2023LIVEPATCH-2026-422 / ALAS2023LIVEPATCH-2026-423
CVECVE-2026-80521
Authoritative release date2026-09-30 23:34:00 UTC (Amazon Linux RSS)
Authority revision date2026-09-30 (each cited Amazon Linux advisory)
Affected versionsThe exact Amazon Linux 2023 package streams enumerated in ALAS2023LIVEPATCH-2026-389 through ALAS2023LIVEPATCH-2026-423 before their advisory-listed fixed builds.
Fixed versionkernel-livepatch-6.1.175-219.359-1.0-9.amzn2023 / kernel-livepatch-6.1.176-220.358-1.0-9.amzn2023 / kernel-livepatch-6.1.176-220.360-1.0-8.amzn2023 / kernel-livepatch-6.1.176-221.360-1.0-8.amzn2023 / kernel-livepatch-6.1.176-221.367-1.0-8.amzn2023 / kernel-livepatch-6.1.176-223.369-1.0-6.amzn2023 / kernel-livepatch-6.1.177-224.371-1.0-6.amzn2023 / kernel-livepatch-6.1.180-225.360-1.0-6.amzn2023 / kernel-livepatch-6.1.182-227.379-1.0-6.amzn2023 / kernel-livepatch-6.1.186-228.374-1.0-4.amzn2023 / kernel-livepatch-6.1.186-228.376-1.0-2.amzn2023 / kernel-livepatch-6.1.188-233.385-1.0-2.amzn2023 / kernel-livepatch-6.12.100-125.179-1.0-6.amzn2023 / kernel-livepatch-6.12.103-127.188-1.0-4.amzn2023 / kernel-livepatch-6.12.103-129.197-1.0-2.amzn2023 / kernel-livepatch-6.12.110-135.201-1.0-2.amzn2023 / kernel-livepatch-6.12.92-122.168-1.0-9.amzn2023 / kernel-livepatch-6.12.94-123.174-1.0-9.amzn2023 / kernel-livepatch-6.12.94-123.176-1.0-8.amzn2023 / kernel-livepatch-6.12.94-123.180-1.0-8.amzn2023 / kernel-livepatch-6.12.94-123.190-1.0-8.amzn2023 / kernel-livepatch-6.12.94-123.192-1.0-6.amzn2023 / kernel-livepatch-6.12.95-124.187-1.0-6.amzn2023 / kernel-livepatch-6.18.35-68.129-1.0-9.amzn2023 / kernel-livepatch-6.18.36-69.134-1.0-9.amzn2023 / kernel-livepatch-6.18.36-69.136-1.0-8.amzn2023 / kernel-livepatch-6.18.36-69.138-1.0-8.amzn2023 / kernel-livepatch-6.18.38-73.137-1.0-8.amzn2023 / kernel-livepatch-6.18.38-76.139-1.0-6.amzn2023 / kernel-livepatch-6.18.39-79.141-1.0-6.amzn2023 / kernel-livepatch-6.18.41-94.142-1.0-6.amzn2023 / kernel-livepatch-6.18.44-99.149-1.0-4.amzn2023 / kernel-livepatch-6.18.48-107.148-1.0-4.amzn2023 / kernel-livepatch-6.18.48-109.150-1.0-2.amzn2023 / kernel-livepatch-6.18.51-120.162-1.0-2.amzn2023
CVSS base scoreNot provided by the authority
CVSS severityImportant
Exploitation statusNot stated by the authority; no exploitation claim is inferred.

What Changed

The 35 notices map the same CVE-2026-80521 AF_UNIX fix to different supported kernel builds. Their package names encode the target kernel; the list is not an instruction to install all 35. Each primary advisory requires live patching to be enabled.

What To Validate Now

  1. Inventory. Locate Amazon Linux 2023 systems using Thirty-five Amazon Linux 2023 kernel live-patch streams; record instance, architecture, repository release, running kernel or service state, installed package NVR, owner, and workload dependencies.
  2. Establish applicability. Match the full running-kernel build and architecture to its advisory and check that livepatch support is configured and still within its support window. The individual notices include 6.18 builds, while the retrieved general AWS guide lists 6.1 and 6.12; confirm the current supported setup with AWS rather than forcing a patch from another stream.
  3. Remediate. Apply the exact advisory-listed fixed package through the supported Amazon Linux 2023 repository and normal change control; use the matching advisory identifier rather than a neighboring package stream.
  4. Validate. Use AWS livepatch status tooling to verify the applicable patch module is loaded and enabled, not merely installed. The running kernel version normally remains unchanged after livepatching, so that version alone cannot prove success. Check workload health and retain the patch/module status with the matching advisory.
  5. Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.

Operational Cautions

Livepatching covers specific fixes and does not eliminate native-kernel updates or planned reboots. AWS documents a limited support window per kernel and notes that some fixes cannot be livepatched. Follow the current AWS livepatch prerequisites and status checks; no patch was installed or tested for this notice.

Evidence To Retain

  • Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
  • UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
  • Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.

Related TechGeeks Resources

Authoritative References

Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.

Categories
Security Notices
Tags
Previous article
Amazon Linux Updates SSM Agent for Four VulnerabilitiesNew!!
09/30/2026
Next article
CISA Adds Exploited Apple File-Processing Flaw to KEVNew!!
09/30/2026