Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities in Kernel Packages
Summary
ALSA-2025:7531: Important: kernel security update. Affects bpftool versions < 4.18.0-553.52.1.el8_10. Fixed in 4.18.0-553.52.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel packages are essential components of the Linux operating system, providing the core functionalities that manage hardware and system resources. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on these kernel packages to ensure system stability and security. The recent vulnerabilities identified in these packages could potentially compromise system integrity and expose sensitive data.
Vulnerability Detail
The vulnerabilities stem from two main issues: a reference count leak in the coretemp hardware monitoring driver (CVE-2022-49011) and a missing range check in the ipset component of netfilter (CVE-2024-53141). The reference count leak can lead to resource exhaustion, while the missing range check may allow unauthorized access to network resources, both of which can have severe implications for system security and stability.
How To Fix
Minimum fixed version
4.18.0-553.52.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected components or disable the specific features that utilize the vulnerable drivers until the system is updated. However, this is not a long-term solution and updating the packages is strongly recommended.
Conclusion
The recent kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system integrity and security. It is essential for users to update their kernel packages to the latest version to protect their systems from potential threats.
See every vulnerability recorded for bpftool →
FAQ
The update addresses a reference count leak in the coretemp driver and a missing range check in the ipset component of netfilter.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
These vulnerabilities can lead to resource exhaustion and unauthorized access to network resources, potentially compromising system security.
Yes, a patch is available in the form of updated kernel packages. Users should update to version 4.18.0-553.52.1.el8_10 or later.
If immediate updates are not possible, consider limiting access to the affected components or disabling features that rely on the vulnerable drivers.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
