Critical Kernel Vulnerability in AlmaLinux Packages: Security Update Required
Summary
ALSA-2026:63014: Important: kernel security, bug fix, and enhancement update. Affects bpftool versions < 4.18.0-553.159.1.el8_10. Fixed in 4.18.0-553.159.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This vulnerability affects various kernel-related packages in AlmaLinux 8, which are crucial for system stability and security.
Vulnerability Detail
This vulnerability encompasses multiple security issues within the Linux kernel, including use-after-free errors, out-of-bounds writes, and resource leaks. These vulnerabilities can lead to system crashes, unauthorized access, or data corruption. Specifically, issues such as the use-after-free in zram_bvec_write_partial() and the remote out-of-bounds write in RDMA/siw pose significant risks, potentially allowing attackers to exploit these flaws for malicious purposes.
How To Fix
Minimum fixed version
4.18.0-553.159.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to vulnerable services or disable specific kernel features until the update is applied. However, this is not a permanent solution and should only be used until the system can be updated.
Conclusion
The vulnerabilities identified in the AlmaLinux kernel packages pose significant risks to system security and stability. It is crucial for users to update their systems to the latest patched versions to mitigate these risks. Regular monitoring and prompt updates are essential for maintaining a secure operating environment.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities include use-after-free errors, out-of-bounds writes, and resource leaks, which can lead to system instability and security breaches.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If an immediate update is not possible, consider limiting access to vulnerable services or disabling certain kernel features as a temporary measure.
Updating the kernel may require some applications to be recompiled or adjusted for compatibility, but it is essential for maintaining system security.
It is advisable to regularly check for updates, ideally weekly or bi-weekly, to ensure your system remains secure against newly discovered vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
