Critical Kernel Vulnerability in AlmaLinux: Important Security Update Available
Summary
ALSA-2026:30129: Important: kernel security, bug fix, and enhancement update. Affects kernel versions < 6.12.0-211.28.1.el10_2. Fixed in 6.12.0-211.28.1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise operating system, relies on the Linux kernel to provide stability, security, and performance. The recent vulnerabilities identified in the kernel packages can potentially expose systems to various security threats, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities identified in the kernel packages include an out-of-bounds read in the rxrpc authenticator parser (CVE-2026-31636), potential race conditions in TCP handling (CVE-2026-43198), and double free issues in SCSI drivers (CVE-2026-43414). These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
6.12.0-211.28.1.el10_2
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to sensitive system resources and monitor system logs for unusual activity until the kernel is updated. Additionally, consider implementing stricter SELinux policies to minimize exposure.
Conclusion
The kernel vulnerabilities identified in AlmaLinux pose significant risks to system security and integrity. Immediate action is required to update the kernel packages to the latest patched version to mitigate these vulnerabilities. Users are encouraged to utilize tools like Vulert for ongoing monitoring and vulnerability management.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities can lead to unauthorized access, system crashes, and potential data loss, compromising the overall security of the system.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, implement workarounds such as limiting access to sensitive resources and monitoring system logs for suspicious activities.
It is advisable to regularly check for updates, ideally on a weekly basis, to ensure your system is protected against the latest vulnerabilities.
Vulert monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json, providing real-time insights into potential security risks.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
