Critical Security Update for Kernel and Related Packages: Important Vulnerabilities Addressed
Summary
ALSA-2026:70402: Important: kernel security, bug fix, and enhancement update. Affects bpftool versions < 4.18.0-553.166.1.el8_10. Fixed in 4.18.0-553.166.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. The affected packages include bpftool, kernel, kernel-abi-stablelists, and others, which are integral to system performance and security. These packages are essential for various functionalities, including networking, device management, and system monitoring.
Vulnerability Detail
This vulnerability arises from multiple security flaws in the Linux kernel and associated packages, including issues such as denial of service, use-after-free errors, and improper handling of Bluetooth connections. These vulnerabilities can lead to system crashes, unauthorized access, and potential exploitation by malicious actors. Specific CVEs associated with this update include CVE-2023-54120, CVE-2023-54214, and CVE-2025-39964, among others, which detail the technical aspects and implications of each flaw.
How To Fix
Minimum fixed version
4.18.0-553.166.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected functionalities or disable Bluetooth services until the packages are updated. This can be done by executing
sudo systemctl stop bluetooth' to halt Bluetooth services.
Conclusion
In summary, the recent vulnerabilities identified in the Linux kernel and related packages pose significant risks to system security and stability. It is crucial for users to update their systems promptly to the patched versions to mitigate these risks. Utilizing tools like Vulert can further enhance your ability to monitor and address vulnerabilities in real-time.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities can lead to system crashes, unauthorized access, and potential exploitation, affecting system stability and security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Consider disabling affected services temporarily or limiting access to functionalities until you can apply the updates.
While specific exploits may not be publicly available, the nature of the vulnerabilities suggests that they could be exploited by malicious actors if left unpatched.
It is recommended to regularly check for updates, ideally on a weekly basis, to ensure your system is protected against the latest vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
