AWS lightsail: Lightsail update management: CVE-2026-98432 kernel fix guidance
Summary
Adds an Important notice describing CVE-2026-98432, a Linux kernel IPv4 networking flaw affecting AL2023 and Amazon Linux 2 blueprints, with required kernel versions and reboot instructions, and retitles the page.
Security assessment
The diff explicitly references CVE-2026-98432, a remotely triggerable kernel memory-corruption/crash flaw, and provides remediation (minimum kernel versions and reboot), directly addressing a specific vulnerability.
Evidence
+**CVE-2026-98432** : A flaw in the Linux kernel's IPv4 networking code can let a remote attacker crash an instance, or possibly corrupt memory, by sending specially timed TCP traffic. This issue affects instances created from the Amazon Linux 2023 (AL2023) and Amazon Linux 2 blueprints. To address it, update the kernel to the following version or later, and then reboot the instance:
Diff
diff --git a/lightsail/latest/userguide/amazon-lightsail-update-management.md b/lightsail/latest/userguide/amazon-lightsail-update-management.md index 7e14b48..c881a0e 100644 --- a//lightsail/latest/userguide/amazon-lightsail-update-management.md +++ b//lightsail/latest/userguide/amazon-lightsail-update-management.md @@ -9 +9 @@ Instance blueprint software support -# Keep Lightsail instances and containers secure with update management +# Update your Lightsail instances and containers @@ -12,0 +13,22 @@ Amazon Web Services (AWS), Amazon Lightsail, and third-party application vendors +###### Important + +**CVE-2026-98432** : A flaw in the Linux kernel's IPv4 networking code can let a remote attacker crash an instance, or possibly corrupt memory, by sending specially timed TCP traffic. This issue affects instances created from the Amazon Linux 2023 (AL2023) and Amazon Linux 2 blueprints. To address it, update the kernel to the following version or later, and then reboot the instance: + + * AL2023 (kernel 6.1): `6.1.189-236.400.amzn2023` + + * Amazon Linux 2 (kernel 4.14): `4.14.355-287.758.amzn2` + + * Amazon Linux 2 (kernel 5.10, if you installed it yourself): `5.10.271-272.1121.amzn2` + + + + +For the update steps, see [Update Amazon Linux on Lightsail instances](./update-amazon-linux.html). + +**Topics** + + * [Update Amazon Linux on Lightsail instances](./update-amazon-linux.html) + + + + @@ -28 +50 @@ The following list of Amazon Lightsail platforms and blueprints links to each ve - * [Amazon Linux 2023](https://aws.amazon.com/linux/amazon-linux-2023/) + * [Amazon Linux 2023](./update-amazon-linux.html#update-amazon-linux-2023) @@ -30 +52 @@ The following list of Amazon Lightsail platforms and blueprints links to each ve - * [Amazon Linux 2](https://aws.amazon.com/amazon-linux-2) + * [Amazon Linux 2](./update-amazon-linux.html#update-amazon-linux-2) @@ -90 +112 @@ Manage IAM user access -Compliance validation +Update Amazon Linux