Critical Kernel Vulnerabilities in AlmaLinux: Important Security Update for Kernel Packages
Summary
ALSA-2026:38491: Important: kernel security, bug fix, and enhancement update. Affects kernel versions < 5.14.0-687.25.1.el9_8. Fixed in 5.14.0-687.25.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages could lead to severe security risks, including memory leaks and potential system crashes, necessitating immediate attention from users and administrators.
Vulnerability Detail
The vulnerabilities addressed in this update include a memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979), a potential NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166), and several other issues that could compromise system integrity and performance. These vulnerabilities can lead to denial of service, system crashes, and unauthorized access if exploited by malicious actors.
How To Fix
Minimum fixed version
5.14.0-687.25.1.el9_8
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit network exposure by configuring firewall rules to restrict access to vulnerable services until the kernel is updated. Additionally, disabling certain network features may mitigate the risk until a full update can be applied.
Conclusion
The recent kernel vulnerabilities in AlmaLinux pose significant risks to system security and stability. Users are strongly advised to update their kernel packages to the latest patched version to mitigate these vulnerabilities. Implementing temporary workarounds can help reduce exposure until a full update is applied.
See every vulnerability recorded for kernel →
FAQ
The update addresses multiple vulnerabilities, including memory leaks and potential NULL pointer dereferences that could lead to system crashes and unauthorized access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
If immediate updates are not possible, consider implementing firewall rules to limit exposure to vulnerable services as a temporary measure.
While kernel updates are generally safe, it is always recommended to back up important data before performing system updates to prevent any potential data loss.
For detailed information about the vulnerabilities, including their impact and technical details, refer to the CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
