Critical Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:1142: Important: kernel security update. Affects bpftool versions < 4.18.0-553.97.1.el8_10. Fixed in 4.18.0-553.97.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This update addresses critical vulnerabilities that could potentially compromise system integrity and user data.
Vulnerability Detail
This security update addresses several vulnerabilities in the Linux kernel, including a Bluetooth disconnect callback issue (CVE-2023-53673), an invalid quirk input mapping in Intel ASoC (CVE-2025-40154), a vsock vulnerability that may lead to memory corruption (CVE-2025-40248), and a validation issue in the drm/vmwgfx command header size (CVE-2025-40277). These vulnerabilities could allow attackers to exploit system resources, leading to unauthorized access, data corruption, or system crashes.
How To Fix
Minimum fixed version
4.18.0-553.97.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider disabling Bluetooth functionality if it is not essential for your operations. This can be done by executing
sudo systemctl stop bluetooth' and 'sudo systemctl disable bluetooth' in the terminal.
Conclusion
The kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security and stability. It is essential to apply the updates promptly to protect your system from potential threats. Utilizing tools like Vulert can help monitor for vulnerabilities in real-time.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities can lead to unauthorized access, memory corruption, and potential system crashes, compromising the security and stability of your system.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, it is crucial to update all affected packages to ensure that your system is secure and protected against these vulnerabilities.
If immediate updates are not possible, consider disabling the affected functionalities as a temporary measure until you can apply the updates.
For more details, refer to the CVE pages listed in the advisory or consult the official AlmaLinux documentation.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
