Critical Kernel Vulnerability in AlmaLinux Packages: Denial of Service and Security Flaws
Summary
ALSA-2026:66325: Important: kernel security, bug fix, and enhancement update. Affects bpftool versions < 4.18.0-553.162.1.el8_10. Fixed in 4.18.0-553.162.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux is a community-driven, open-source Linux distribution that aims to provide a stable and secure platform for enterprise-level applications. The kernel packages in AlmaLinux are essential for system functionality, but they can also be susceptible to vulnerabilities that may compromise system integrity and security.
Vulnerability Detail
The vulnerability stems from multiple security flaws identified in the Linux kernel, including a Denial of Service (DoS) issue in the qla2xxx SCSI driver due to improper command handling after a chip reset (CVE-2025-68745). Other vulnerabilities include improper validation of MAC headers, stale association handling in SCTP, and various memory management issues leading to potential use-after-free conditions. These vulnerabilities can lead to system crashes, unauthorized access, and exploitation of system resources, posing significant risks to users and organizations relying on AlmaLinux.
How To Fix
Minimum fixed version
4.18.0-553.162.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the affected SCSI driver or disable specific features that may trigger the vulnerabilities until the system is updated. However, it is highly recommended to apply the patch as soon as possible for complete protection.
Conclusion
The vulnerabilities identified in the AlmaLinux kernel packages pose significant risks to system security and stability. It is crucial for users to update their systems to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for vulnerabilities in real-time, ensuring that your software remains secure.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities include Denial of Service issues, improper command handling, and memory management flaws that can lead to system crashes and unauthorized access.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to access the code.
As a temporary measure, consider limiting the use of the affected SCSI driver or disabling features that may trigger the vulnerabilities until you can apply the patch.
Failure to address these vulnerabilities can lead to system crashes, unauthorized access, and exploitation of system resources, which can compromise the security and integrity of your system.
Detailed information about the vulnerabilities can be found on the CVE pages listed in the advisory, as well as through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
