Critical Security Update for Kernel and Related Packages in AlmaLinux 8: Addressing CVE-2022-49985 and CVE-2025-38352
Summary
ALSA-2025:15471: Important: kernel security update. Affects bpftool versions < 4.18.0-553.74.1.el8_10. Fixed in 4.18.0-553.74.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. In AlmaLinux 8, the kernel package includes essential functionalities that support various applications and services. This update addresses significant security vulnerabilities that could potentially compromise system integrity and performance.
Vulnerability Detail
The vulnerabilities identified as CVE-2022-49985 and CVE-2025-38352 affect the kernel's handling of BPF (Berkeley Packet Filter) and posix CPU timers. CVE-2022-49985 allows for improper range checking on array access, which could lead to unauthorized memory access. CVE-2025-38352 highlights a race condition between timer handling functions, potentially leading to system instability or crashes. These vulnerabilities pose serious risks, including data breaches and denial of service.
How To Fix
Minimum fixed version
4.18.0-553.74.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider disabling the affected features temporarily until the update can be applied. For example, you can limit the use of BPF functionalities or avoid using posix CPU timers in critical applications.
Conclusion
The vulnerabilities in the kernel and related packages of AlmaLinux 8 pose significant risks to system security and stability. It is crucial to apply the provided updates promptly to mitigate these risks and ensure the integrity of your operating system.
See every vulnerability recorded for bpftool →
FAQ
These are identifiers for specific vulnerabilities in the Linux kernel that could lead to unauthorized access and system instability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
Consider implementing workarounds such as disabling affected features or limiting their use until you can apply the patch.
Regularly check for updates, especially for critical packages like the kernel, to ensure your system remains secure.
Failure to address these vulnerabilities can lead to data breaches, system crashes, and unauthorized access to sensitive information.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
