Kernel Security Update: Vulnerabilities in AlmaLinux 9 Kernel Packages
Summary
ALSA-2025:17760: Moderate: kernel security update. Affects kernel versions < 5.14.0-570.52.1.el9_6. Fixed in 5.14.0-570.52.1.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux 9 provides a robust kernel that supports various functionalities, including process management, memory management, and device control. However, recent vulnerabilities have been identified that could potentially compromise system security.
Vulnerability Detail
The vulnerabilities in the AlmaLinux 9 kernel packages stem from multiple sources, including improper validation of input data and inadequate handling of certain operations. Specifically, issues such as CVE-2025-38556, which affects HID core functions, and CVE-2025-38614, which involves eventpoll recursion, could lead to system crashes or unauthorized access. These vulnerabilities highlight the importance of maintaining up-to-date kernel packages to mitigate security risks.
How To Fix
Minimum fixed version
5.14.0-570.52.1.el9_6
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to sensitive system functions or disable specific features that may be exploited until the kernel is updated. However, the most effective solution is to apply the patch as soon as possible.
Conclusion
In summary, the recent vulnerabilities in the AlmaLinux 9 kernel packages pose significant security risks that can be mitigated through timely updates. Users are encouraged to apply the necessary patches and utilize tools like Vulert to monitor their systems for vulnerabilities.
See every vulnerability recorded for kernel →
FAQ
The update addresses vulnerabilities such as CVE-2025-38556, CVE-2025-38614, CVE-2025-39757, and CVE-2023-53373, which could lead to system crashes or unauthorized access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
If immediate updates are not possible, consider implementing temporary workarounds such as limiting access to sensitive functions until the update can be applied.
It is advisable to check for kernel updates regularly, ideally on a weekly basis, to ensure that your system is protected against the latest vulnerabilities.
Vulert is a tool that monitors and alerts users about open-source vulnerabilities in software using a manifest file like package-lock.json. It provides real-time insights into potential security risks.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
