Critical Kernel Vulnerability in AlmaLinux: Important Security Update for Multiple Packages
Summary
ALSA-2026:3083: Important: kernel security update. Affects bpftool versions < 4.18.0-553.107.1.el8_10. Fixed in 4.18.0-553.107.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages can lead to severe security risks, including privilege escalation and system instability, necessitating immediate attention from users and administrators.
Vulnerability Detail
The vulnerabilities identified include multiple use-after-free issues in various components of the kernel, such as page_pool, bridge multicast, and multicast route stats. These vulnerabilities can allow attackers to exploit memory management flaws, potentially leading to privilege escalation or system crashes. Specifically, CVE-2025-38129, CVE-2025-38248, CVE-2025-40064, CVE-2025-68800, and CVE-2026-23074 highlight critical weaknesses that could be exploited if not addressed promptly.
How To Fix
Minimum fixed version
4.18.0-553.107.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to sensitive system resources and monitor system logs for unusual activities until the kernel is updated. However, applying the patch is the recommended approach to fully mitigate the vulnerabilities.
Conclusion
The recent kernel vulnerabilities in AlmaLinux pose significant security risks that require immediate action. By updating to the latest patched versions of the affected packages, users can protect their systems from potential exploits. Regular monitoring and updates are essential to maintaining a secure operating environment.
See every vulnerability recorded for bpftool →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to update the kernel can leave your system vulnerable to attacks that exploit the identified vulnerabilities, potentially leading to data breaches or system compromise.
Yes, you should update all affected packages, including kernel, bpftool, and kernel-abi-stablelists, to ensure comprehensive protection.
It is advisable to regularly check for updates, especially after security advisories are released, to ensure your system remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
