Kernel Security Update: Critical Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2025:15005: Moderate: kernel security update. Affects kernel versions < 6.12.0-55.30.1.el10_0. Fixed in 6.12.0-55.30.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The kernel packages in AlmaLinux include various components such as kernel-core, kernel-modules, and kernel-devel, each serving specific functions in the operating system. Recent vulnerabilities have been identified that could potentially compromise system security and integrity.
Vulnerability Detail
The vulnerabilities identified in the AlmaLinux kernel packages stem from various issues, including memory leaks, use-after-free errors, and potential crashes due to uninitialized entries. These vulnerabilities, tracked under CVEs such as CVE-2025-22058 and CVE-2025-38472, can lead to unauthorized access, system crashes, and data corruption. The vulnerabilities affect multiple components of the kernel, making it crucial for users to address them promptly to maintain system security.
How To Fix
Minimum fixed version
6.12.0-55.30.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to affected services or disable specific kernel features until the system is updated. However, this is not a permanent solution and should only be used until the kernel can be patched.
Conclusion
In summary, the recent vulnerabilities identified in the AlmaLinux kernel packages pose significant risks to system security and stability. Users are strongly advised to update their kernel packages to the latest patched version to protect against potential exploits. Utilizing tools like Vulert can further enhance security by providing real-time monitoring of open-source vulnerabilities.
See every vulnerability recorded for kernel →
FAQ
The main vulnerabilities include memory leaks, use-after-free errors, and potential crashes due to uninitialized entries, which can lead to unauthorized access and system instability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By simply using a manifest file like package-lock.json, Vulert can help you identify if your application is affected.
It is recommended to update your kernel packages to the latest patched version immediately to mitigate the risks associated with the vulnerabilities.
While a temporary workaround includes limiting access to affected services, it is crucial to apply the kernel update as soon as possible for a permanent fix.
Detailed information about the vulnerabilities can be found on the CVE pages listed in the advisory, as well as through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
