Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2025:18281: Moderate: kernel security update. Affects kernel versions < 5.14.0-570.55.1.el9_6. Fixed in 5.14.0-570.55.1.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the kernel to provide stability, security, and performance. Recent vulnerabilities have been identified in various kernel packages, necessitating immediate attention to ensure system integrity and security.
Vulnerability Detail
The vulnerabilities stem from multiple issues within the kernel packages, including improper handling of return codes, slab-out-of-bounds errors, and inadequate management of TLS alerts. These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system security and stability. The identified CVEs include CVE-2022-50087, CVE-2025-22026, CVE-2025-38566, CVE-2025-38571, CVE-2025-39817, CVE-2025-39841, and CVE-2025-39849, each highlighting specific weaknesses that could be exploited by attackers.
How To Fix
Minimum fixed version
5.14.0-570.55.1.el9_6
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to sensitive services or disable features that utilize the affected kernel functionalities until the update can be applied. However, this is not a permanent solution and should only be used as a stopgap.
Conclusion
In summary, the recent kernel vulnerabilities in AlmaLinux packages present significant security risks that must be addressed promptly. Users are urged to update their kernel packages to the latest patched version to safeguard their systems. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities could lead to unauthorized access, system crashes, or data corruption, significantly compromising system security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
It is not recommended to continue using the affected versions as they pose security risks. Updating to the patched version is essential.
If immediate updates are not possible, consider implementing temporary workarounds, such as limiting access to sensitive services.
Detailed information about the vulnerabilities can be found on the respective CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
