Critical Kernel Security Update for AlmaLinux: Important Fixes for bpftool and Kernel Packages
Summary
ALSA-2026:9131: Important: kernel security update. Affects bpftool versions < 4.18.0-553.120.1.el8_10. Fixed in 4.18.0-553.120.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages, particularly affecting bpftool and other kernel components, pose significant security risks that need immediate attention.
Vulnerability Detail
The vulnerabilities stem from improper memory management and race conditions within the kernel's SCSI subsystem and ALSA loopback device. Specifically, CVE-2025-68741 relates to the improper freeing of purex items in the qla2xxx driver, which could lead to memory corruption and potential system crashes. CVE-2026-23191 addresses a race condition in the ALSA loopback device's PCM trigger, which could allow unauthorized access to audio streams, leading to data leakage or system instability.
How To Fix
Minimum fixed version
4.18.0-553.120.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the affected SCSI and ALSA functionalities until the update is applied. This can be done by modifying the kernel parameters or removing the specific modules, but it is recommended to apply the update as soon as possible for full protection.
Conclusion
The kernel vulnerabilities identified in AlmaLinux pose serious security risks that require immediate attention. By updating to the patched version of the kernel and bpftool, users can protect their systems from potential exploits. It is crucial to stay informed about such vulnerabilities and utilize tools like Vulert to monitor your software for any future risks.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities can lead to memory corruption, system crashes, and unauthorized access to audio streams, potentially compromising system integrity.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software by analyzing your manifest file. Visit Vulert Scanner for more details.
It is not recommended to continue using the affected packages without applying the security updates, as they expose your system to significant risks.
If immediate updates are not possible, consider disabling the affected functionalities as a temporary measure until you can apply the patches.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, as well as through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
