Moderate Security Vulnerability in Kernel and Related Packages on AlmaLinux 8
Summary
ALSA-2025:16919: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.77.1.el8_10. Fixed in 4.18.0-553.77.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. The affected packages, including bpftool, kernel, and various kernel modules, provide essential functionalities for system operations and performance. This vulnerability affects multiple components of the kernel ecosystem, making it critical for users to address it promptly.
Vulnerability Detail
The vulnerability stems from several security issues within the kernel packages, including a potential denial of service due to improper handling of return codes and a use-after-free (UAF) vulnerability in class handling. These vulnerabilities can lead to system instability, unauthorized access, or exploitation by malicious actors. Specifically, the issues identified include CVE-2025-22026, CVE-2025-37797, CVE-2022-50087, and CVE-2025-38718, each posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
4.18.0-553.77.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected services or disable specific functionalities until the patch is applied. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
In summary, the kernel and related packages on AlmaLinux 8 have been identified with moderate security vulnerabilities that require immediate attention. Users are advised to update their systems to the latest patched versions to mitigate risks and ensure system integrity.
See every vulnerability recorded for bpftool →
FAQ
The vulnerability can lead to system crashes, unauthorized access, and potential exploitation by attackers, affecting the overall security of the system.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerabilities are associated with CVE-2025-22026, CVE-2025-37797, CVE-2022-50087, and CVE-2025-38718.
Yes, there is a risk of data loss or corruption if the vulnerability is exploited, especially in critical systems.
If immediate updates are not possible, consider implementing temporary workarounds and monitoring your system closely for any unusual activity.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
