AWS issues security advisory for Linux kernel KVM hypervisor memory flaw

What happened.Amazon Web Services published security bulletin 2026-137-AWS describing a host memory corruption defect in Linux kernel virtualized networking drivers.
Why it matters.Teams running private KVM clusters or hosting custom tenant virtual machines face potential escape or denial-of-service risks. Infrastructure operators managing on-premises hypervisors or self-hosted virtualization stacks should update host kernel packages and restart affected virtualization worker nodes.
The technical specifications:
- Defect scope: Flaws in virtio-net and tap network handling allow guest virtual machines to corrupt host hypervisor memory or force kernel crashes.
- Cloud isolation: Multi-tenant infrastructure services including standard Amazon EC2, AWS Lambda, and AWS Fargate remain unaffected by the issue.
- Package updates: Amazon Linux maintainers published security advisories ALAS2-2026-2580 and ALAS2023-2026-890 containing patched upstream kernel packages.