AWS Deploys Patches for Critical Linux Kernel and eMudhra CA Vulnerabilities

Amazon Web Services (AWS) is rolling out critical security updates for a Linux kernel IPv4 TCP use-after-free vulnerability (CVE-2026-98432) and an eMudhra intermediate CA key recovery issue (CVE-2026-111943). Patches for various AWS services, including Redshift, Bottlerocket, DMS, EKS, and Application Load Balancers, are available or fully deployed by November 2, 2026, with customers advised to update self-managed instances.