OS command injection in Amazon Linux log4j-cve-2021-44228-hotpatch lets a local user run arbitrary commands as root by abusing a Java process whose executable path contains embedded newline characters. Affected: versions < 1.3-9.amzn2. Remediate by upgrading the package to 1.3-9.amzn2 or later per Amazon advisories.