Moderate Security Update for Kernel and Related Packages in AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:18297: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.80.1.el8_10. Fixed in 4.18.0-553.80.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, managing system resources and hardware interactions. In AlmaLinux 8, the kernel package includes essential functionalities for system stability and performance. This update addresses critical vulnerabilities that could potentially compromise system security and integrity.
Vulnerability Detail
The vulnerabilities identified include CVE-2025-39757, which involves a validation issue in the ALSA usb-audio subsystem, and CVE-2025-39751, which pertains to a buffer overflow in the hda/ca0132 driver. Additionally, CVE-2023-53373 addresses improper handling of the EBUSY error in the crypto seqiv module. These vulnerabilities could allow attackers to exploit system resources, leading to unauthorized access or system crashes.
How To Fix
Minimum fixed version
4.18.0-553.80.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for these vulnerabilities. It is highly recommended to apply the updates as soon as they are available to mitigate any potential risks.
Conclusion
In summary, the kernel and related packages in AlmaLinux 8 have been identified with multiple vulnerabilities that require immediate attention. Updating to the patched version is essential to maintain system security and integrity.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities could lead to unauthorized access, system crashes, or exploitation of system resources.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software without needing to access the code or installation.
While no specific workarounds are available, it is crucial to plan for an update as soon as possible to ensure system security.
Detailed information about the vulnerabilities can be found on the CVE pages listed in the advisory.
Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in your software.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
