Moderate Security Update for Kernel and Related Packages in AlmaLinux 8
Summary
ALSA-2025:14438: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.71.1.el8_10. Fixed in 4.18.0-553.71.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. The affected packages, including bpftool, kernel, kernel-core, and others, are integral to the functionality and performance of the AlmaLinux 8 ecosystem. These packages provide essential tools and libraries for system operations, making their security paramount.
Vulnerability Detail
The vulnerability arises from two critical issues: a memory accounting leak in the UDP protocol (CVE-2025-22058) and an MMIO write access to an invalid page in the i40e driver (CVE-2025-38200). These vulnerabilities could potentially allow unauthorized access to system memory or lead to system instability, posing significant risks to data integrity and system performance.
How To Fix
Minimum fixed version
4.18.0-553.71.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, no specific workarounds have been provided for these vulnerabilities. It is recommended to apply the security updates as soon as they are available to mitigate any risks.
Conclusion
The recent security update for the kernel and related packages in AlmaLinux 8 addresses critical vulnerabilities that could compromise system integrity and performance. Users are encouraged to update their packages promptly to safeguard their systems.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities could lead to unauthorized access to system memory or cause system instability, affecting overall performance and security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is crucial to prioritize updating the packages as soon as possible to mitigate risks.
As of now, there are no publicly known exploits for these vulnerabilities, but it is essential to remain vigilant and apply updates promptly.
It is advisable to regularly check for updates, ideally on a weekly basis, to ensure your system remains secure against vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
