ALSA-2026:87375: AlmaLinux 8 kernel security update addresses multiple flaws
Summary
ALSA-2026:87375: Multiple kernel security flaws may compromise system integrity or availability through affected networking, filesystem, audio, FUSE, and device-management paths. Affects bpftool versions < 4.18.0-553.177.1.el8_10. Fixed in 4.18.0-553.177.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core operating-system component distributed in the AlmaLinux:8 ecosystem. It manages hardware and provides essential services for applications, including networking, filesystems, audio, and device access. This advisory covers kernel packages and related tools and development components, including bpftool, perf, and kernel module packages.
Vulnerability Detail
The advisory addresses multiple kernel security flaws that may affect system integrity or availability. The listed issues involve IPv4 raw packet header validation and fragment reassembly, FUSE request locking, IPv4 route alias cleanup, ALSA queue timer destruction, XFS dirty bitmap bounds checking, and VFIO PCI initialization cleanup. The advisory does not specify the individual impacts or a CVSS score; it refers readers to the related CVE pages for further details.
How To Fix
Minimum fixed version
4.18.0-553.177.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
AI-generated workaround (not vendor-documented): Restrict access to systems running affected AlmaLinux:8 packages and limit untrusted users' ability to interact with kernel-facing services until the packages can be upgraded. No vendor workaround is provided.
Conclusion
Upgrade affected AlmaLinux:8 packages to 4.18.0-553.177.1.el8_10. The advisory covers multiple kernel components and does not publish a CVSS score or a documented workaround. Review installed packages against the advisory's affected list and apply the fixed package version. Vulert monitors the dependencies in a manifest file like package-lock.json and alerts when a new vulnerability affects them; check an application at https://vulert.com/scanner.
See every vulnerability recorded for bpftool →
FAQ
ALSA-2026:87375 affects the listed packages from version 0 up to, but not including, 4.18.0-553.177.1.el8_10.
ALSA-2026:87375 covers kernel flaws that may compromise system integrity or availability; individual impacts are not specified in the advisory.
Upgrade affected AlmaLinux:8 packages to the minimum fixed version, 4.18.0-553.177.1.el8_10.
Restrict access to affected systems and limit untrusted users' interaction with kernel-facing services; the advisory documents no workaround.
Manually inspect installed AlmaLinux:8 package versions against the affected package list and fixed version. Vulert can scan a manifest or SBOM and monitor the dependency at Vulert Scanner.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
