Moderate Kernel Security Update for AlmaLinux: Addressing CVE-2025-22026 and CVE-2025-38718
Summary
ALSA-2025:17396: Moderate: kernel security update. Affects kernel versions < 6.12.0-55.38.1.el10_0. Fixed in 6.12.0-55.38.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux 10 utilizes a specific version of the kernel that has been identified as vulnerable to certain security issues. This vulnerability can potentially compromise system integrity and expose sensitive data.
Vulnerability Detail
The vulnerabilities identified in this update are CVE-2025-22026 and CVE-2025-38718. CVE-2025-22026 relates to the NFS server (nfsd) not properly handling the return code of the svc_proc_register() function, which could lead to denial of service or unauthorized access. CVE-2025-38718 involves the SCTP protocol, where cloned GSO packets are not properly linearized in the sctp_rcv function, potentially allowing for data corruption or system crashes. Both vulnerabilities pose significant risks to system security and stability.
How To Fix
Minimum fixed version
6.12.0-55.38.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider disabling NFS services or limiting access to the affected SCTP functionalities until the kernel is updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
In summary, the kernel vulnerabilities CVE-2025-22026 and CVE-2025-38718 pose significant risks to AlmaLinux 10 systems. It is crucial to update to the patched kernel version 6.12.0-55.38.1.el10_0 to mitigate these risks. Temporary workarounds can be employed, but they should not replace the need for a proper update.
See every vulnerability recorded for kernel →
FAQ
These are identifiers for specific vulnerabilities in the kernel that could lead to security breaches or system instability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Consider disabling NFS services or limiting access to SCTP functionalities as a temporary workaround until you can apply the update.
It is recommended to check for updates regularly, at least once a month, or subscribe to security alerts for your distribution.
Vulert is a service that monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json, providing real-time insights.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
