Critical Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:64808: Important: kernel security update. Affects kernel versions < 5.14.0-687.45.1.el9_8. Fixed in 5.14.0-687.45.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This vulnerability report highlights critical security issues affecting the kernel packages in AlmaLinux 9, which could potentially compromise system integrity and data security.
Vulnerability Detail
This vulnerability report identifies several critical issues within the kernel packages of AlmaLinux 9, including improper locking mechanisms, out-of-bounds heap reads, and potential double-free vulnerabilities. These issues stem from flaws in the kernel's handling of certain operations, such as network filtering and session management, which could allow an attacker to exploit these weaknesses to gain unauthorized access or execute arbitrary code. The vulnerabilities are tracked under multiple CVEs, including CVE-2025-38004, CVE-2026-52933, and CVE-2026-64384, among others.
How To Fix
Minimum fixed version
5.14.0-687.45.1.el9_8
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to sensitive kernel features or disable specific functionalities that may be exploited until the system is updated. However, it is highly recommended to apply the patch as soon as possible.
Conclusion
In summary, the kernel vulnerabilities identified in AlmaLinux 9 pose significant risks to system security and integrity. Users are strongly advised to update their kernel packages to the latest patched version to mitigate these risks effectively. Utilizing tools like Vulert can assist in monitoring and managing vulnerabilities in open-source software.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities could allow attackers to execute arbitrary code, gain unauthorized access, or cause system crashes, leading to potential data loss or system downtime.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any installation.
If immediate updates are not possible, consider implementing temporary workarounds such as restricting access to vulnerable features or disabling certain functionalities.
While specific exploits may not be publicly disclosed, the nature of the vulnerabilities suggests that they could be targeted by attackers, making it crucial to apply patches promptly.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, as well as through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
