Moderate Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:9580: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.58.1.el8_10. Fixed in 4.18.0-553.58.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, including AlmaLinux. It manages system resources and facilitates communication between hardware and software. The kernel packages in AlmaLinux include various components such as kernel-core, kernel-modules, and kernel-tools, which are essential for system stability and performance. However, vulnerabilities in the kernel can pose significant security risks, potentially allowing unauthorized access or system instability.
Vulnerability Detail
This security update addresses multiple vulnerabilities in the kernel, including a double free race condition in the CIFS file system (CVE-2022-48919), a slab-out-of-bounds access in key_task_permission (CVE-2024-50301), an error path issue in idpf_vc_core_init (CVE-2024-53064), and the need for RCU protection in ndisc_alloc_skb() (CVE-2025-21764). These vulnerabilities could lead to system crashes, unauthorized access, or data corruption, making it crucial to apply the necessary updates.
How To Fix
Minimum fixed version
4.18.0-553.58.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for these vulnerabilities. The best course of action is to apply the security updates as soon as they are available.
Conclusion
In summary, the kernel security update for AlmaLinux addresses multiple vulnerabilities that could compromise system security. It is crucial to update the affected packages to the patched version to mitigate these risks. Regular monitoring and timely updates are essential for maintaining a secure system.
See every vulnerability recorded for bpftool →
FAQ
CVE-2022-48919 is a vulnerability that involves a double free race condition in the CIFS file system, which could lead to system instability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system integrity.
Delaying updates can expose your system to security risks. It is recommended to apply the updates as soon as possible to ensure system security.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in your software using just a manifest file, like package-lock.json, without requiring code access or installation.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
