Critical Vulnerability in Kernel Packages: Important Security Update for AlmaLinux 8
Summary
ALSA-2026:33743: Important: kernel security, bug fix, and enhancement update. Affects bpftool versions < 4.18.0-553.139.1.el8_10. Fixed in 4.18.0-553.139.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, managing system resources and facilitating communication between hardware and software. AlmaLinux 8 is a community-driven, open-source operating system that provides a stable and secure platform for enterprise applications. The kernel packages in AlmaLinux 8 include essential components such as bpftool, kernel-core, and kernel-modules, which are crucial for system performance and security. This vulnerability affects multiple kernel packages, highlighting the importance of timely updates to maintain system integrity.
Vulnerability Detail
This vulnerability arises from several critical issues within the kernel packages, including a use-after-free vulnerability in the iscsi target subsystem (CVE-2026-23216), a use-after-free in the gfs2 filesystem (CVE-2026-45984), and a double free error in the RDMA subsystem (CVE-2026-46189). These vulnerabilities can lead to system crashes, unauthorized access, or arbitrary code execution, posing significant risks to system security and stability.
How To Fix
Minimum fixed version
4.18.0-553.139.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider disabling the affected services or components until the system can be updated. However, this is not a long-term solution, and updating to the patched version is strongly recommended.
Conclusion
In summary, the recent vulnerabilities identified in the kernel packages of AlmaLinux 8 pose significant risks to system security and stability. It is crucial to apply the recommended updates to mitigate these vulnerabilities and ensure the continued protection of your system.
See every vulnerability recorded for bpftool →
FAQ
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to update your kernel packages can expose your system to security threats, including unauthorized access, data breaches, and system instability.
Yes, applying the update is safe and is the recommended action to protect your system from potential vulnerabilities.
If you experience issues after updating, you can revert to a previous kernel version using the GRUB menu during system boot. Additionally, consult the AlmaLinux community for support.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
