Kernel Security Vulnerability in AlmaLinux:10 - Multiple CVEs Addressed
Summary
ALSA-2025:11855: Moderate: kernel security update. Affects kernel versions < 6.12.0-55.24.1.el10_0. Fixed in 6.12.0-55.24.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, managing system resources and facilitating communication between hardware and software. AlmaLinux:10 provides a stable and secure environment for applications, but vulnerabilities can compromise its integrity. The recent security update addresses several critical issues that could lead to unauthorized access or system instability.
Vulnerability Detail
The kernel vulnerabilities identified include CVE-2025-22091, which involves an overflow in the RDMA/mlx5 page_size variable, potentially leading to memory corruption. CVE-2025-22121 highlights an out-of-bounds read in the ext4 filesystem, risking data exposure. CVE-2025-37797 points to a use-after-free vulnerability in the net_sched subsystem, which could allow attackers to execute arbitrary code. CVE-2025-38088 and CVE-2025-38110 involve out-of-bounds access in memory trace and MDIOS bus, respectively, which could lead to system crashes or unauthorized data manipulation.
How To Fix
Minimum fixed version
6.12.0-55.24.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to affected components or disable specific kernel features until the update is applied. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
The kernel vulnerabilities in AlmaLinux:10 present serious risks that can compromise system security and stability. It is crucial to apply the recommended updates promptly to mitigate these threats and ensure the integrity of your operating system.
See every vulnerability recorded for kernel →
FAQ
These vulnerabilities can lead to unauthorized access, data corruption, or system crashes, potentially allowing attackers to execute arbitrary code.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without requiring access to the code.
Continuing to use an unpatched system poses significant security risks. It is highly recommended to apply the updates as soon as possible.
If immediate updates are not possible, consider implementing temporary workarounds such as limiting access to affected components.
Detailed information about the vulnerabilities, including CVSS scores and acknowledgments, can be found on the CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
