Moderate Security Update for Kernel and Related Packages in AlmaLinux 8
Summary
ALSA-2025:13589: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.69.1.el8_10. Fixed in 4.18.0-553.69.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. In AlmaLinux 8, the kernel package includes essential functionalities that support various applications and services. This update addresses multiple security vulnerabilities that could potentially compromise system integrity and performance.
Vulnerability Detail
The vulnerabilities identified in this update include a use-after-free (UAF) issue in the padata subsystem (CVE-2025-21727), an extended RCU protection issue in the IPv6 multicast handling (CVE-2025-21759), and multiple use-after-free bugs in the CAN subsystem (CVE-2021-47670). Additionally, a race condition in the huge page management (CVE-2025-38085) and a buffer overflow in the Wi-Fi driver (CVE-2025-38159) were also addressed. These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system security.
How To Fix
Minimum fixed version
4.18.0-553.69.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workarounds are provided for these vulnerabilities. The best course of action is to apply the security updates as soon as they are available.
Conclusion
In summary, the kernel and related packages in AlmaLinux 8 have been updated to address several critical vulnerabilities. It is essential for users to apply the updates promptly to ensure system security and stability.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities can lead to unauthorized access, system crashes, or data corruption, significantly affecting system security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While no specific workarounds are provided, it is crucial to plan for an update as soon as possible to mitigate risks.
As of now, there are no publicly known exploits for these vulnerabilities, but it is essential to apply the updates to prevent potential exploitation.
Yes, Vulert can monitor your applications for vulnerabilities in real-time using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
