Critical Local Privilege Escalation Vulnerability in Kernel and Related Packages
Summary
ALSA-2026:19666: Important: kernel security update. Affects bpftool versions < 4.18.0-553.125.1.el8_10. Fixed in 4.18.0-553.125.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. The affected packages include various kernel components and tools that are essential for system operation and performance. These packages are integral to the functioning of the AlmaLinux operating system, providing necessary functionalities for system stability and security.
Vulnerability Detail
The vulnerability identified as CVE-2026-46300, dubbed 'Fragnesia', is a variant of the Dirty Frag vulnerability affecting the ESP/XFRM subsystem of the Linux kernel. This flaw allows an unprivileged user to escalate their privileges locally, potentially gaining unauthorized access to sensitive system resources. Additionally, CVE-2026-46333 allows unprivileged users to read root-owned files, further compromising system security. The ramifications of these vulnerabilities could lead to unauthorized data access and system manipulation, posing significant risks to system integrity.
How To Fix
Minimum fixed version
4.18.0-553.125.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, it is advisable to limit user permissions and restrict access to sensitive files until the system can be updated. Regularly monitor user activities and apply strict access controls to mitigate potential exploitation of these vulnerabilities.
Conclusion
The vulnerabilities identified in the kernel and related packages pose significant risks to system security, allowing for local privilege escalation and unauthorized access to sensitive files. It is critical to update to the patched version to safeguard against these threats. Regular monitoring and strict access controls are recommended as interim measures.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities allow local privilege escalation and unauthorized access to root-owned files, which can compromise system security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Exploitation of these vulnerabilities could lead to unauthorized access to sensitive data, system manipulation, and overall compromise of system integrity.
Yes, a patch is available in the form of the updated package version 4.18.0-553.125.1.el8_10. It is crucial to update to this version to mitigate the vulnerabilities.
If immediate updates are not possible, implement strict access controls and monitor user activities to minimize the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
