Amazon linux

This hub aggregates every CVE we track for Amazon linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Amazon linux.

• CVE-2026-48112GHSL-2026-122 7-Zip Ar SYMDEF OOB Read6.5Jun 5, 2026
• CVE-2026-48111GHSL-2026-121 7-Zip UEFI DEPEX OOB Read4.3Jun 5, 2026
• CVE-2026-48104GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read4.2Jun 5, 2026
• CVE-2026-48103GHSL-2026-119 7-Zip WIM SecurityId OOB read4.3Jun 5, 2026
• CVE-2026-48102GHSL-2026-118: 7-Zip UDF Field OOB Read3.1Jun 5, 2026
• CVE-2026-48101GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure6.5Jun 5, 2026
• CVE-2026-480927-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116)4.3Jun 5, 2026
• CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions7.1Jun 1, 2026
• CVE-2026-6324Libsoup: libsoup: http request smuggling via unsigned to signed conversion error4.8May 29, 2026
• CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validation8.0May 27, 2026
• CVE-2026-8376Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds9.8May 25, 2026
• CVE-2026-43466net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery8.2May 8, 2026
• CVE-2026-43456bonding: fix type confusion in bond_setup_by_slave()7.8May 8, 2026
• CVE-2026-43403nsfs: tighten permission checks for ns iteration ioctls8.8May 8, 2026
• CVE-2026-43194net: consume xmit errors of GSO frames7.5May 6, 2026