Critical Kernel Security Update for AlmaLinux: Addressing Vulnerabilities in Kernel Packages
Summary
ALSA-2026:8921: Important: kernel security update. Affects kernel versions < 5.14.0-611.49.1.el9_7. Fixed in 5.14.0-611.49.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel to ensure system stability and performance. Recent vulnerabilities have been identified in the kernel packages, necessitating immediate attention to maintain system security.
Vulnerability Detail
The vulnerabilities identified in the kernel packages include CVE-2025-39766 and CVE-2025-68741. CVE-2025-39766 pertains to the net/sched subsystem, where the cake_enqueue function fails to return NET_XMIT_CN when the buffer limit is exceeded, potentially leading to denial of service or data loss. CVE-2025-68741 involves improper memory management in the qla2xxx SCSI driver, which could allow for memory corruption or system crashes. Both vulnerabilities pose significant risks to system integrity and availability.
How To Fix
Minimum fixed version
5.14.0-611.49.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the network traffic to avoid triggering the vulnerabilities until the kernel is updated. This can be done by configuring firewall rules or using traffic shaping tools to manage bandwidth effectively.
Conclusion
In summary, the recent kernel vulnerabilities in AlmaLinux require immediate attention through updates to the kernel packages. By following the outlined steps to update and implementing temporary workarounds, users can safeguard their systems against potential threats.
See every vulnerability recorded for kernel →
FAQ
The update addresses CVE-2025-39766 and CVE-2025-68741, which involve issues in the net/sched subsystem and the qla2xxx SCSI driver, respectively.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected without needing to sign up.
If an immediate update is not possible, consider implementing traffic management strategies to mitigate the risk of exploitation until the update can be applied.
Yes, the vulnerabilities could potentially lead to data loss or system crashes, particularly in environments with high network traffic or improper memory management.
It is advisable to regularly check for kernel updates and apply them promptly to ensure your system remains secure against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
