Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities Addressed
Summary
ALSA-2025:23279: Important: kernel security update. Affects kernel versions < 6.12.0-124.21.1.el10_1. Fixed in 6.12.0-124.21.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. The recent vulnerabilities identified in the kernel packages pose significant risks, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities identified in the kernel packages include CVE-2025-38499 and CVE-2025-39984. CVE-2025-38499 relates to improper privilege checks in the clone_private_mnt() function, which could allow unauthorized users to perform actions requiring elevated privileges. CVE-2025-39984 involves an issue in the tun network driver where the napi->skb structure is not updated correctly after the XDP process, potentially leading to data corruption or denial of service. These vulnerabilities could be exploited by attackers to gain unauthorized access or disrupt system operations.
How To Fix
Minimum fixed version
6.12.0-124.21.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected functionalities by adjusting user permissions and ensuring that only trusted users have access to the system. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
In summary, the recent kernel vulnerabilities in AlmaLinux pose serious security risks that require immediate attention. Users are strongly encouraged to update their kernel packages to the latest patched version to mitigate these risks effectively. Implementing workarounds may provide temporary relief, but updating is the best course of action.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities could allow unauthorized access to system resources or lead to denial of service, compromising the integrity and availability of the system.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
Continuing to use the affected kernel version poses significant security risks. It is advisable to update to the patched version as soon as possible.
If immediate updates are not possible, consider implementing strict access controls and monitoring system logs for any suspicious activity.
Detailed information about the vulnerabilities can be found on the respective CVE pages, such as CVE-2025-38499 and CVE-2025-39984.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
