AWS is tackling the Copy.fail class of privilege escalation vulnerabilities affecting the Linux Kernel. This is an ongoing situation, so expect updates as patches roll out. User action required: apply all available updates for affected services ASAP. Check Security Bulletin 2026-030-AWS for specific patching timelines and details.
source: [aws/security-bulletin]
AWS disclosed CVE-2026-46300, a privilege escalation vulnerability in the Linux kernel's networking code related to the DirtyFrag issue class. The exploit requires the espintcp loadable module, which Amazon Linux doesn't ship, so you're safe if you're running on AWS infrastructure. Amazon's rolling out a hardening patch anyway as defense-in-depth to protect against similar network protocol issues down the road. Check Security Bulletin 2026-030-AWS for patching details if you're running custom kernels elsewhere.
source: [aws/security-bulletin]