Amazon Linux 2 Security Advisory: ALAS2LIVEPATCH-2026-290
Advisory Released Date: 2026-05-09
Advisory Updated Date: 2026-05-09
Severity:
Important
Issue Overview:
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: avoid in-place decrypt on shared skb frags
"Dirty Frag" and other issues in Amazon Linux kernels:
https://aws.amazon.com/security/security-bulletins/2026-027-aws/ (CVE-2026-43284)
Affected Packages:
kernel-livepatch-5.10.252-250.1005
Issue Correction:
Please ensure you have live patching enabled. Run yum update kernel-livepatch-5.10.252-250.1005 or yum update --advisory ALAS2LIVEPATCH-2026-290 to update your system.
New Packages:
aarch64:
kernel-livepatch-5.10.252-250.1005-1.0-2.amzn2.aarch64
src:
kernel-livepatch-5.10.252-250.1005-1.0-2.amzn2.src
x86_64:
kernel-livepatch-5.10.252-250.1005-1.0-2.amzn2.x86_64