Ongoing updates on Copy.fail and variants
Source AWS Security Bulletins
Mentioned vulnerabilities
Rated High by Threat Radar from the AWS Security Bulletins text
Data as of 20 Oct 2026, 00:20 UTC
What to do
AI-suggested
AWS has released official patches and updates for all affected services and Linux kernel versions. Customers should apply all available updates to Amazon Linux kernels, Bottlerocket hosts, ECS, EKS, EMR, Fargate, AWS Deep Learning AMIs, and SageMaker resources promptly. For managed services like Fargate and SageMaker, many patches are applied automatically; customers should restart affected instances, notebooks, or applications as instructed to ensure patched kernels are in use. AWS continues to update the bulletin with new patching timelines and guidance. Customers should monitor the AWS Security Bulletin (ID: 2026-030-AWS) for ongoing updates and apply patches as soon as they are available.
Description
Bulletin ID: 2026-030-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 05/13/2026 10:00 PM PDT This is an ongoing issue. This bulletin will be updated as more information becomes available. Description: AWS is aware of the copy.fail or DirtyFrag class of issues - a set of privilege escalation issues affecting the Linux Kernel. We will update this bulletin as more information becomes available. Please see below for current patching timelines for affected services related to the Copy.fail kernel issue and all its variants. AWS recommends that customers apply all updates addressing these issues as soon as they are available. See more details at Security Bulletin (ID: 2026-030-AWS).