Critical Kernel Security Update for AlmaLinux: Important Fixes for Multiple Packages
Summary
ALSA-2026:0444: Important: kernel security update. Affects bpftool versions < 4.18.0-553.92.1.el8_10. Fixed in 4.18.0-553.92.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages could lead to severe security risks, making it imperative for users to stay updated with the latest patches.
Vulnerability Detail
The vulnerabilities addressed in this update include a race condition in the media remote control driver (CVE-2025-39993), a potential NULL dereference in the SCTP protocol (CVE-2025-40240), and a use-after-free issue in the Ceph library (CVE-2025-68285). These vulnerabilities could allow attackers to exploit system resources, leading to crashes, unauthorized access, or data corruption.
How To Fix
Minimum fixed version
4.18.0-553.92.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are recommended for these vulnerabilities. The best course of action is to apply the available updates as soon as possible.
Conclusion
The kernel security update for AlmaLinux addresses critical vulnerabilities that could pose significant risks to system integrity and security. Users are strongly encouraged to update their packages to the latest versions to safeguard their systems against potential exploits.
See every vulnerability recorded for bpftool →
FAQ
The update addresses three main vulnerabilities: a race condition in the media remote control driver, a NULL dereference in the SCTP protocol, and a use-after-free issue in the Ceph library.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to access the code.
While there are no specific workarounds, it is crucial to prioritize updating your kernel as soon as possible to mitigate the risks associated with these vulnerabilities.
It is recommended to regularly check for updates, ideally weekly, to ensure that your system is protected against the latest vulnerabilities.
For more details, refer to the CVE pages linked in the advisory or visit the AlmaLinux security advisories page.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
