Critical Kernel Security Update for AlmaLinux: Addressing Race Conditions in i40e and MPTCP
Summary
ALSA-2025:0065: Important: kernel security update. Affects bpftool versions < 4.18.0-553.34.1.el8_10. Fixed in 4.18.0-553.34.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. In AlmaLinux 8, the kernel packages include various modules and tools that enhance system performance and security. However, vulnerabilities within the kernel can lead to significant security risks, making timely updates crucial for maintaining system integrity.
Vulnerability Detail
The vulnerabilities identified in this update are related to race conditions in the i40e driver and the MultiPath TCP (MPTCP) implementation. Specifically, CVE-2024-53088 addresses a race condition that could allow an attacker to exploit the filter's intermediate sync state, potentially leading to unauthorized access or system instability. Similarly, CVE-2024-53122 pertains to MPTCP, where racing conditions during subflow creation could compromise data integrity and system performance. Both vulnerabilities pose serious risks, necessitating immediate attention.
How To Fix
Minimum fixed version
4.18.0-553.34.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the exposure of their systems by disabling the affected features in the kernel until the update is applied. However, it is highly recommended to perform the update as soon as possible to fully mitigate the risks associated with these vulnerabilities.
Conclusion
In summary, the kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system integrity and performance. Users are strongly encouraged to update their kernel packages to the latest version to mitigate these risks effectively. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for bpftool →
FAQ
The update addresses two critical vulnerabilities: CVE-2024-53088 related to the i40e driver and CVE-2024-53122 concerning MPTCP, both of which involve race conditions.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
These vulnerabilities could lead to unauthorized access, system instability, and compromised data integrity, making it crucial to apply the updates promptly.
While kernel updates are generally safe, it is always advisable to back up important data before performing system updates to prevent any unforeseen issues.
If immediate updates are not possible, consider disabling the affected features in the kernel as a temporary workaround, but prioritize applying the updates as soon as you can.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
