Moderate Kernel Security Update: Addressing Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2025:13602: Moderate: kernel security update. Affects kernel versions < 5.14.0-570.33.2.el9_6. Fixed in 5.14.0-570.33.2.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. The kernel packages in AlmaLinux 9 are crucial for system stability and security, and vulnerabilities in these packages can lead to severe security risks and system instability.
Vulnerability Detail
The vulnerability stems from a double free issue in the hash_accept function within the crypto subsystem of the Linux kernel, identified as CVE-2025-38079. This flaw can be exploited to cause memory corruption, potentially leading to arbitrary code execution or system crashes. Additionally, another vulnerability (CVE-2025-38292) relates to invalid memory access in the ath12k Wi-Fi driver, which can also compromise system integrity. Both vulnerabilities pose significant risks to system security and stability.
How To Fix
Minimum fixed version
5.14.0-570.33.2.el9_6
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the affected kernel features or revert to a previous stable kernel version until the update can be applied. However, this is not a permanent solution and should be addressed promptly.
Conclusion
In summary, the vulnerabilities identified in the AlmaLinux kernel packages pose significant risks to system security and stability. It is crucial for users to update their kernel packages to the latest patched version to mitigate these risks. Regular monitoring and prompt updates are essential for maintaining a secure operating environment.
See every vulnerability recorded for kernel →
FAQ
CVE-2025-38079 is a vulnerability in the Linux kernel that allows for a double free in the hash_accept function, potentially leading to memory corruption.
You can use the Vulert platform to check if your application is affected by this vulnerability by analyzing your manifest file. Visit Vulert Scanner for more information.
Exploitation of these vulnerabilities can lead to arbitrary code execution, system crashes, and compromised system integrity, posing significant security risks.
It is recommended to regularly check for updates and apply them promptly, especially when security vulnerabilities are disclosed.
Vulert is a tool that monitors and alerts in real-time for open-source vulnerabilities in software, using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
