Critical Kernel Vulnerability in AlmaLinux Packages: Security Update Required
Summary
ALSA-2026:77498: Important: kernel security update. Affects bpftool versions < 4.18.0-553.172.1.el8_10. Fixed in 4.18.0-553.172.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the kernel for stability and performance. This vulnerability affects multiple kernel-related packages in AlmaLinux 8, potentially compromising system security and integrity.
Vulnerability Detail
This vulnerability arises from several issues within the kernel packages, including a use-after-free (UAF) condition when a peer resets a connection during a handshake (CVE-2026-64115), inconsistent handling of packet headers (CVE-2026-74582), and the rejection of inline replies that overflow the pull-up buffer (CVE-2026-89530). These vulnerabilities can lead to unauthorized access, data corruption, or system crashes, posing significant risks to system security.
How To Fix
Minimum fixed version
4.18.0-553.172.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit exposure by disabling unnecessary network services or restricting access to sensitive applications until the kernel is updated. However, the best course of action is to apply the security update as soon as possible.
Conclusion
The kernel vulnerability in AlmaLinux packages poses a significant risk to system security. Users are strongly advised to update their kernel and related packages to the latest patched version to mitigate potential threats. Utilizing tools like Vulert can help monitor for vulnerabilities and ensure system integrity.
See every vulnerability recorded for bpftool →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially allowing attackers to manipulate memory and execute arbitrary code.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By uploading your manifest file, such as package-lock.json, you can check for vulnerabilities without needing to install any software.
Failing to update the kernel can leave your system vulnerable to attacks, data breaches, and system instability, which can lead to significant operational disruptions.
Yes, you can roll back to a previous kernel version using the GRUB menu during system boot. However, it is recommended to troubleshoot any issues with the updated kernel instead.
Yes, you can configure your system to automatically apply updates using the 'dnf-automatic' package, which can be set up to check for and install updates regularly.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
