Critical Security Update for Kernel Package: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:11428: Important: kernel security update. Affects kernel versions < 6.12.0-55.22.1.el10_0. Fixed in 6.12.0-55.22.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of any Linux operating system, serving as the core interface between the computer's hardware and its processes. It manages system resources, facilitates communication between software and hardware, and provides essential services for all other software applications. The kernel is crucial for system stability and security, making it a prime target for vulnerabilities. The recent vulnerabilities identified in the kernel package could lead to severe security risks, affecting system integrity and user data.
Vulnerability Detail
The kernel package has been found to contain several vulnerabilities, including CVE-2024-58002, CVE-2024-57980, CVE-2025-21905, CVE-2025-37958, and CVE-2025-38089. These vulnerabilities stem from issues such as dangling pointers, double free errors, and improper handling of authentication processes. If exploited, these vulnerabilities could allow attackers to execute arbitrary code, cause system crashes, or compromise sensitive data, posing significant risks to users and organizations.
How To Fix
Minimum fixed version
6.12.0-55.22.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the kernel functionalities or disable specific features that are known to be vulnerable until the patch is applied. However, this is not a long-term solution and should only be used until the update is completed.
Conclusion
In summary, the kernel package has critical vulnerabilities that need immediate attention. Updating to the patched version is essential to maintain system security and integrity. Users should also consider utilizing tools like Vulert for ongoing monitoring of vulnerabilities in their software.
See every vulnerability recorded for kernel →
FAQ
The main vulnerabilities include issues related to dangling pointers, double free errors, and improper authentication handling, which could lead to arbitrary code execution and system crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If an immediate update is not possible, consider implementing workarounds such as limiting access to vulnerable functionalities until the patch can be applied.
It is recommended to check for kernel updates regularly, ideally on a weekly basis, to ensure that your system is protected against the latest vulnerabilities.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json. It provides real-time alerts without requiring code access or installation.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
