Bulletin ID: 2026-160-AWS
Publication Date: 10/30/2026 22:15 PM PDT
Description:
AWS is aware of CVE-2026-98432, a memory issue in the Linux kernel IPv4 TCP handshake path affecting kernel versions 4.4 and later that could result in remote code execution. Updated kernel packages are available for Amazon Linux 2 and Amazon Linux 2023, and we recommend customers running self-managed Linux instances update and reboot. AWS is applying updates to managed services and no customer action is required for those services. For full details and per-service guidance, see the complete bulletin at https://aws.amazon.com/security/security-bulletins/2026-160-aws/
Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Read the original article: