Critical Kernel Vulnerability in AlmaLinux: Important Security Update for Kernel Packages
Summary
ALSA-2026:33685: Important: kernel security, bug fix, and enhancement update. Affects kernel versions < 6.12.0-211.29.1.el10_2. Fixed in 6.12.0-211.29.1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. This vulnerability affects various kernel packages, including kernel, kernel-64k, and kernel-debug, which are essential for system operations.
Vulnerability Detail
This vulnerability arises from multiple issues within the kernel packages, specifically related to the Advanced Linux Sound Architecture (ALSA) and Remote Direct Memory Access (RDMA) subsystems. Key issues include out-of-bounds (OOB) writes in the usb-audio driver (CVE-2026-43279), use-after-free (UAF) vulnerabilities in the aloop driver (CVE-2026-46090), and double-free errors in the RDMA subsystem (CVE-2026-46189). These vulnerabilities could lead to system crashes, unauthorized access, or arbitrary code execution, posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
6.12.0-211.29.1.el10_2
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected kernel modules or disable specific functionalities related to ALSA and RDMA until the update is applied. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
In summary, the kernel vulnerability in AlmaLinux poses significant risks to system security and stability. Users are urged to update their kernel packages to the latest patched version to mitigate these risks. Regular monitoring and updates are essential for maintaining a secure operating environment.
See every vulnerability recorded for kernel →
FAQ
The vulnerability can lead to system crashes, unauthorized access, or arbitrary code execution, compromising system security.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider limiting access to the affected kernel modules or disabling related functionalities as a temporary workaround.
Regularly check for updates and vulnerabilities, ideally on a weekly basis, to ensure your system remains secure.
Vulert monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json, providing real-time insights into potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
