Moderate Security Update for Kernel and Related Packages in AlmaLinux 8
Summary
ALSA-2025:11850: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.64.1.el8_10. Fixed in 4.18.0-553.64.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. In AlmaLinux 8, the kernel package includes essential functionalities that support various applications and services. This update addresses vulnerabilities that could potentially compromise system integrity and security.
Vulnerability Detail
The vulnerabilities identified in this update include CVE-2025-21905, which pertains to the iwlwifi driver, potentially allowing unauthorized access to sensitive information. CVE-2025-21919 addresses a memory corruption issue in the scheduler, which could lead to system instability or crashes. Additionally, CVE-2022-49977 involves a NULL pointer dereference in ftrace, which could disrupt system operations. These vulnerabilities stem from flaws in the kernel's handling of specific operations, posing risks to system security and reliability.
How To Fix
Minimum fixed version
4.18.0-553.64.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling the affected features or drivers until the system can be updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
In summary, the kernel and related packages in AlmaLinux 8 have been updated to address critical vulnerabilities that could impact system security. Users are strongly encouraged to apply the updates promptly to safeguard their systems against potential threats.
See every vulnerability recorded for bpftool →
FAQ
The kernel is crucial as it manages system resources, facilitates communication between hardware and software, and ensures the overall stability and performance of the operating system.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application against these vulnerabilities using the Vulert playground at Vulert Scanner without needing to sign up.
Failure to address these vulnerabilities could lead to unauthorized access, system crashes, or instability, compromising the security and reliability of your system.
Yes, applying the updates is essential for maintaining system security and stability. The updates have been tested and are designed to fix the identified vulnerabilities.
If you experience issues after updating, you can revert to the previous kernel version by selecting it from the GRUB menu during boot. Additionally, you can seek support from the AlmaLinux community or forums.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
