Critical Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:10371: Important: kernel security update. Affects kernel versions < 6.12.0-55.20.1.el10_0. Fixed in 6.12.0-55.20.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. Recent vulnerabilities have been identified in the kernel packages, necessitating immediate attention to maintain system integrity.
Vulnerability Detail
The vulnerabilities identified include issues such as improper RCU protection in the IPv6 multicast handling, out-of-bounds access on systems with CPU-less NUMA nodes, and malformed packet sizing in the vmxnet3 driver. These vulnerabilities can lead to potential denial of service, data corruption, or unauthorized access to system resources, posing significant risks to system security and stability.
How To Fix
Minimum fixed version
6.12.0-55.20.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable IPv6 or avoid using the affected features until the kernel is updated. However, this is not a permanent solution and should only be considered until the patch is applied.
Conclusion
The recent kernel vulnerabilities in AlmaLinux pose significant risks to system security. It is crucial to update to the patched version to mitigate these risks effectively. Users should remain vigilant and utilize tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for kernel →
FAQ
The update addresses vulnerabilities related to IPv6 multicast handling, out-of-bounds access in CPU-less NUMA nodes, and malformed packet sizing in the vmxnet3 driver.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to access the code.
If immediate updates are not possible, consider disabling IPv6 or avoiding the use of affected features as a temporary workaround.
It is recommended to regularly check for updates, ideally on a weekly basis, to ensure your system remains secure against newly discovered vulnerabilities.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, as well as through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
