Amazon Linux 2023 Live Patches Address Four Kernel Network-Stack Vulnerabilities
Tech GuruP1 — VALIDATE AND PATCHAWS IMPORTANTEXPLOITATION: NOT STATED
Quick Answer
AWS released 29 Amazon Linux 2023 live-patch advisories on 2026-09-18 for four Linux kernel network-stack CVEs. The advisories cover distinct kernel live-patch streams, so applicability must be established from the exact installed package; the product family or CVE name alone is not enough. AWS rates every advisory Important and directs administrators to update the applicable live-patch package or advisory.
Validate The Exact Kernel Stream Before Updating
What to do now: Identify Amazon Linux 2023 systems with live patching enabled, record the installed kernel-livepatch package and running kernel, and match that exact stream to the table below. Apply only the corresponding AWS-supported update, then verify the resulting package and live-patch state.
Last verified: 2026-09-19 UTC. Recheck the live Amazon advisory for the exact stream before changing production.
Scope And Authority
| Product scope | Amazon Linux 2023 kernel live-patch packages listed below |
|---|---|
| Advisories | ALAS2023LIVEPATCH-2026-360 through ALAS2023LIVEPATCH-2026-388 |
| CVEs | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| Authoritative release time | 2026-09-18 23:33 UTC (Amazon Linux 2023 RSS) |
| Authority revision date | 2026-09-18 |
| AWS advisory severity | Important |
| CVSS base score | Not provided by the authority |
| CVSS severity | Not provided by the authority |
| Exploitation status | Not stated by AWS in the cited advisories; severity alone is not exploitation evidence. |
What AWS Changed
The coordinated batch supplies updated live-patch packages for 29 Amazon Linux 2023 kernel streams. AWS associates all streams with CVE-2026-80844 (IPv6 AH routing-header validation) and CVE-2026-81000 (TUN receive-headroom bounds). Twenty-three streams also address CVE-2026-68121 (PPPoE header-pointer handling) and CVE-2026-74469 (SCTP peer-transport count overflow).
This notice does not infer a particular impact beyond the authority's descriptions, does not claim that every Amazon Linux 2023 host is affected, and does not treat the AWS Important rating as evidence of exploitation.
What To Validate Now
- Inventory. Identify Amazon Linux 2023 instances, the running kernel, whether live patching is enabled, and the exact installed
kernel-livepatchpackage. - Match. Compare the installed package stream with one advisory row below. Do not apply an advisory solely because a CVE appears in a scanner result.
- Preserve. Retain UTC timestamps, instance identifiers, pre-change package queries, repository metadata, update output, relevant change approval, and live-patch or kernel health evidence.
- Remediate. Use AWS's documented command for the matching package or run
dnf update --advisory ADVISORY-ID --releasever latestwith the exact applicable advisory. - Validate. Confirm the resulting fixed package, running-kernel relationship, live-patch state, service health, monitoring, and representative workloads.
- Escalate. If the exact stream cannot be established, repository access is unavailable, or the update cannot be validated, defer the change and use AWS support or the responsible platform team rather than forcing an unverified package path.
Affected Streams And Fixed Packages
| Amazon advisory | Affected live-patch stream | Fixed package builds | CVEs |
|---|---|---|---|
| ALAS2023LIVEPATCH-2026-360 | kernel-livepatch-6.12.103-127.188 | kernel-livepatch-6.12.103-127.188-1.0-3.amzn2023.aarch64kernel-livepatch-6.12.103-127.188-1.0-3.amzn2023.srckernel-livepatch-6.12.103-127.188-1.0-3.amzn2023.x86_64 | CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-361 | kernel-livepatch-6.18.38-73.137 | kernel-livepatch-6.18.38-73.137-1.0-7.amzn2023.aarch64kernel-livepatch-6.18.38-73.137-1.0-7.amzn2023.srckernel-livepatch-6.18.38-73.137-1.0-7.amzn2023.x86_64 | CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-362 | kernel-livepatch-6.18.48-107.148 | kernel-livepatch-6.18.48-107.148-1.0-3.amzn2023.aarch64kernel-livepatch-6.18.48-107.148-1.0-3.amzn2023.srckernel-livepatch-6.18.48-107.148-1.0-3.amzn2023.x86_64 | CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-363 | kernel-livepatch-6.18.44-99.149 | kernel-livepatch-6.18.44-99.149-1.0-3.amzn2023.aarch64kernel-livepatch-6.18.44-99.149-1.0-3.amzn2023.srckernel-livepatch-6.18.44-99.149-1.0-3.amzn2023.x86_64 | CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-364 | kernel-livepatch-6.18.39-79.141 | kernel-livepatch-6.18.39-79.141-1.0-5.amzn2023.aarch64kernel-livepatch-6.18.39-79.141-1.0-5.amzn2023.srckernel-livepatch-6.18.39-79.141-1.0-5.amzn2023.x86_64 | CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-365 | kernel-livepatch-6.1.186-228.374 | kernel-livepatch-6.1.186-228.374-1.0-3.amzn2023.aarch64kernel-livepatch-6.1.186-228.374-1.0-3.amzn2023.srckernel-livepatch-6.1.186-228.374-1.0-3.amzn2023.x86_64 | CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-366 | kernel-livepatch-6.1.175-219.359 | kernel-livepatch-6.1.175-219.359-1.0-8.amzn2023.aarch64kernel-livepatch-6.1.175-219.359-1.0-8.amzn2023.srckernel-livepatch-6.1.175-219.359-1.0-8.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-367 | kernel-livepatch-6.12.94-123.176 | kernel-livepatch-6.12.94-123.176-1.0-7.amzn2023.aarch64kernel-livepatch-6.12.94-123.176-1.0-7.amzn2023.srckernel-livepatch-6.12.94-123.176-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-368 | kernel-livepatch-6.1.177-224.371 | kernel-livepatch-6.1.177-224.371-1.0-5.amzn2023.aarch64kernel-livepatch-6.1.177-224.371-1.0-5.amzn2023.srckernel-livepatch-6.1.177-224.371-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-369 | kernel-livepatch-6.1.176-221.367 | kernel-livepatch-6.1.176-221.367-1.0-7.amzn2023.aarch64kernel-livepatch-6.1.176-221.367-1.0-7.amzn2023.srckernel-livepatch-6.1.176-221.367-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-370 | kernel-livepatch-6.12.94-123.192 | kernel-livepatch-6.12.94-123.192-1.0-5.amzn2023.aarch64kernel-livepatch-6.12.94-123.192-1.0-5.amzn2023.srckernel-livepatch-6.12.94-123.192-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-371 | kernel-livepatch-6.1.176-220.358 | kernel-livepatch-6.1.176-220.358-1.0-8.amzn2023.aarch64kernel-livepatch-6.1.176-220.358-1.0-8.amzn2023.srckernel-livepatch-6.1.176-220.358-1.0-8.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-372 | kernel-livepatch-6.18.36-69.134 | kernel-livepatch-6.18.36-69.134-1.0-8.amzn2023.aarch64kernel-livepatch-6.18.36-69.134-1.0-8.amzn2023.srckernel-livepatch-6.18.36-69.134-1.0-8.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-373 | kernel-livepatch-6.12.94-123.190 | kernel-livepatch-6.12.94-123.190-1.0-7.amzn2023.aarch64kernel-livepatch-6.12.94-123.190-1.0-7.amzn2023.srckernel-livepatch-6.12.94-123.190-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-374 | kernel-livepatch-6.1.176-220.360 | kernel-livepatch-6.1.176-220.360-1.0-7.amzn2023.aarch64kernel-livepatch-6.1.176-220.360-1.0-7.amzn2023.srckernel-livepatch-6.1.176-220.360-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-375 | kernel-livepatch-6.12.95-124.187 | kernel-livepatch-6.12.95-124.187-1.0-5.amzn2023.aarch64kernel-livepatch-6.12.95-124.187-1.0-5.amzn2023.srckernel-livepatch-6.12.95-124.187-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-376 | kernel-livepatch-6.1.176-221.360 | kernel-livepatch-6.1.176-221.360-1.0-7.amzn2023.aarch64kernel-livepatch-6.1.176-221.360-1.0-7.amzn2023.srckernel-livepatch-6.1.176-221.360-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-377 | kernel-livepatch-6.12.92-122.168 | kernel-livepatch-6.12.92-122.168-1.0-8.amzn2023.aarch64kernel-livepatch-6.12.92-122.168-1.0-8.amzn2023.srckernel-livepatch-6.12.92-122.168-1.0-8.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-378 | kernel-livepatch-6.1.176-223.369 | kernel-livepatch-6.1.176-223.369-1.0-5.amzn2023.aarch64kernel-livepatch-6.1.176-223.369-1.0-5.amzn2023.srckernel-livepatch-6.1.176-223.369-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-379 | kernel-livepatch-6.12.94-123.174 | kernel-livepatch-6.12.94-123.174-1.0-8.amzn2023.aarch64kernel-livepatch-6.12.94-123.174-1.0-8.amzn2023.srckernel-livepatch-6.12.94-123.174-1.0-8.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-380 | kernel-livepatch-6.12.94-123.180 | kernel-livepatch-6.12.94-123.180-1.0-7.amzn2023.aarch64kernel-livepatch-6.12.94-123.180-1.0-7.amzn2023.srckernel-livepatch-6.12.94-123.180-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-381 | kernel-livepatch-6.1.180-225.360 | kernel-livepatch-6.1.180-225.360-1.0-5.amzn2023.aarch64kernel-livepatch-6.1.180-225.360-1.0-5.amzn2023.srckernel-livepatch-6.1.180-225.360-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-382 | kernel-livepatch-6.18.36-69.136 | kernel-livepatch-6.18.36-69.136-1.0-7.amzn2023.aarch64kernel-livepatch-6.18.36-69.136-1.0-7.amzn2023.srckernel-livepatch-6.18.36-69.136-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-383 | kernel-livepatch-6.18.35-68.129 | kernel-livepatch-6.18.35-68.129-1.0-8.amzn2023.aarch64kernel-livepatch-6.18.35-68.129-1.0-8.amzn2023.srckernel-livepatch-6.18.35-68.129-1.0-8.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-384 | kernel-livepatch-6.12.100-125.179 | kernel-livepatch-6.12.100-125.179-1.0-5.amzn2023.aarch64kernel-livepatch-6.12.100-125.179-1.0-5.amzn2023.srckernel-livepatch-6.12.100-125.179-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-385 | kernel-livepatch-6.1.182-227.379 | kernel-livepatch-6.1.182-227.379-1.0-5.amzn2023.aarch64kernel-livepatch-6.1.182-227.379-1.0-5.amzn2023.srckernel-livepatch-6.1.182-227.379-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-386 | kernel-livepatch-6.18.38-76.139 | kernel-livepatch-6.18.38-76.139-1.0-5.amzn2023.aarch64kernel-livepatch-6.18.38-76.139-1.0-5.amzn2023.srckernel-livepatch-6.18.38-76.139-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-387 | kernel-livepatch-6.18.36-69.138 | kernel-livepatch-6.18.36-69.138-1.0-7.amzn2023.aarch64kernel-livepatch-6.18.36-69.138-1.0-7.amzn2023.srckernel-livepatch-6.18.36-69.138-1.0-7.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
| ALAS2023LIVEPATCH-2026-388 | kernel-livepatch-6.18.41-94.142 | kernel-livepatch-6.18.41-94.142-1.0-5.amzn2023.aarch64kernel-livepatch-6.18.41-94.142-1.0-5.amzn2023.srckernel-livepatch-6.18.41-94.142-1.0-5.amzn2023.x86_64 | CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000 |
Supported Remediation And Operational Cautions
AWS directs administrators to ensure live patching is enabled and update the exact live-patch package or advisory with --releasever latest. Follow the Amazon Linux 2023 repository and update documentation. The table records the fixed package builds published by AWS for aarch64, source, and x86_64.
A successful package transaction is not, by itself, proof that the intended live patch is active or that application workloads are healthy. Validate the installed build and runtime state, follow normal change and rollback controls, and do not remove evidence needed to reconstruct the change.
Exploitation And Scoring Boundaries
The cited AWS advisories do not state an exploitation status and do not publish a CVSS base score or CVSS severity. Accordingly, this notice records both CVSS fields as Not provided by the authority. No exploitation claim is inferred from AWS's Important advisory rating.
Related TechGeeks Resources
Authoritative References
- ALAS2023LIVEPATCH-2026-360
- ALAS2023LIVEPATCH-2026-361
- ALAS2023LIVEPATCH-2026-362
- ALAS2023LIVEPATCH-2026-363
- ALAS2023LIVEPATCH-2026-364
- ALAS2023LIVEPATCH-2026-365
- ALAS2023LIVEPATCH-2026-366
- ALAS2023LIVEPATCH-2026-367
- ALAS2023LIVEPATCH-2026-368
- ALAS2023LIVEPATCH-2026-369
- ALAS2023LIVEPATCH-2026-370
- ALAS2023LIVEPATCH-2026-371
- ALAS2023LIVEPATCH-2026-372
- ALAS2023LIVEPATCH-2026-373
- ALAS2023LIVEPATCH-2026-374
- ALAS2023LIVEPATCH-2026-375
- ALAS2023LIVEPATCH-2026-376
- ALAS2023LIVEPATCH-2026-377
- ALAS2023LIVEPATCH-2026-378
- ALAS2023LIVEPATCH-2026-379
- ALAS2023LIVEPATCH-2026-380
- ALAS2023LIVEPATCH-2026-381
- ALAS2023LIVEPATCH-2026-382
- ALAS2023LIVEPATCH-2026-383
- ALAS2023LIVEPATCH-2026-384
- ALAS2023LIVEPATCH-2026-385
- ALAS2023LIVEPATCH-2026-386
- ALAS2023LIVEPATCH-2026-387
- ALAS2023LIVEPATCH-2026-388
- Amazon Linux 2023 security-advisory RSS
- Amazon Linux 2023 update documentation
Wrap-Up
Record whether one of the 29 advisory streams applies. If it does, assign an owner, preserve the before-and-after evidence, complete the AWS-supported update, and document the validated package and runtime result.
Correction policy: If AWS changes affected packages, fixed builds, severity, exploitation information, or required action, TechGeeks will update this notice and its verification date.
