Critical Kernel Vulnerabilities in AlmaLinux: Important Security Update for Kernel Packages
Summary
ALSA-2026:1143: Important: kernel security update. Affects kernel versions < 5.14.0-611.26.1.el9_7. Fixed in 5.14.0-611.26.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This vulnerability affects various kernel packages in AlmaLinux 9, highlighting the importance of timely updates to maintain system integrity.
Vulnerability Detail
The vulnerabilities identified include a use-after-free condition in the device mapper due to a race condition in zone reporting (CVE-2025-38141), another use-after-free in eventpoll (CVE-2025-38349), and a double free bug in drm/xe (CVE-2025-38731). Additionally, a vulnerability in vsock may lead to memory corruption (CVE-2025-40248), and a race condition in mptcp_schedule_work() (CVE-2025-40258) has been fixed. Other issues include an out-of-bounds write in Bluetooth MGMT that can lead to information disclosure and denial of service (CVE-2025-40294), and a fragment overflow handling issue in the RX path (CVE-2025-68301). The Bluetooth hci_sock vulnerability (CVE-2025-68305) also prevents race conditions in socket write iterations and socket binding. These vulnerabilities can lead to severe system instability, data loss, and unauthorized access.
How To Fix
Minimum fixed version
5.14.0-611.26.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not possible, consider disabling the affected services temporarily or applying security policies that limit access to vulnerable components. However, this is not a permanent solution and should only be used until the system can be updated.
Conclusion
The recent kernel vulnerabilities in AlmaLinux pose significant risks to system security and stability. It is imperative to apply the necessary updates to mitigate these vulnerabilities and protect your system from potential threats. Regular monitoring and timely updates are crucial for maintaining a secure computing environment.
See every vulnerability recorded for kernel →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory location after it has been freed, potentially leading to arbitrary code execution or crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Failing to update the kernel can expose your system to security risks, including data breaches, system crashes, and unauthorized access to sensitive information.
Yes, applying the update is essential for maintaining system security and stability. Always ensure that you have a backup before proceeding with updates.
If you experience problems after updating, you can revert to the previous kernel version using the GRUB menu during boot. Additionally, consult the AlmaLinux community for support.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
