Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities in Kernel Packages
Summary
ALSA-2026:9264: Important: kernel security update. Affects kernel versions < 6.12.0-124.52.1.el10_1. Fixed in 6.12.0-124.52.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. The recent vulnerabilities identified in the kernel packages can potentially compromise system integrity and performance, making timely updates essential.
Vulnerability Detail
The vulnerabilities identified in the kernel packages include CVE-2025-39766, which affects the net/sched component, causing the cake_enqueue function to improperly handle packets when exceeding the buffer limit. This could lead to denial of service or unexpected behavior in network traffic management. Additionally, CVE-2025-68741 addresses an improper memory management issue in the qla2xxx SCSI driver, which could result in memory corruption or system crashes. Both vulnerabilities pose significant risks to system stability and security.
How To Fix
Minimum fixed version
6.12.0-124.52.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the network traffic to avoid triggering the vulnerabilities until the kernel is updated. This can be achieved by adjusting the network configuration to reduce the load on the affected components, although this is not a permanent solution.
Conclusion
The kernel vulnerabilities identified in AlmaLinux pose significant risks to system stability and security. It is crucial for users to update their kernel packages to the latest patched version to mitigate these risks. Utilizing tools like Vulert can further enhance security by providing real-time monitoring of vulnerabilities.
See every vulnerability recorded for kernel →
FAQ
The main vulnerabilities include improper handling of network packets in the cake_enqueue function and improper memory management in the qla2xxx SCSI driver.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Run the command 'sudo dnf update kernel' in your terminal to update to the patched version 6.12.0-124.52.1.el10_1.
Yes, failing to update the kernel can leave your system vulnerable to denial of service attacks and memory corruption, potentially leading to system crashes.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights into your application's security.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
