Critical Kernel Vulnerabilities in AlmaLinux: Important Security Update for Kernel Packages
Summary
ALSA-2026:19074: Important: kernel security update. Affects kernel versions < 6.12.0-211.7.3.el10_2. Fixed in 6.12.0-211.7.3.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages pose significant risks, including potential denial of service and local privilege escalation, which could compromise system integrity and security.
Vulnerability Detail
The vulnerabilities in the kernel packages include a denial of service issue in the 'authencesn' function due to a too-short AAD (CVE-2026-23060), a reversion to out-of-place operation in the 'algif_aead' crypto module (CVE-2026-31431), and a limitation on RX SG extraction by receive buffer budget in the 'af_alg' crypto module (CVE-2026-31677). Additionally, a new local privilege escalation vulnerability, termed 'Dirty Frag' ESP XFRM variant (CVE-2026-43284), has been identified, which could allow unauthorized users to gain elevated privileges.
How To Fix
Minimum fixed version
6.12.0-211.7.3.el10_2
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to sensitive system resources and monitor system logs for unusual activity until the kernel is updated. Additionally, consider implementing stricter user permissions to mitigate the risk of privilege escalation.
Conclusion
The recent kernel vulnerabilities in AlmaLinux present significant security risks that require immediate attention. Users are strongly advised to update their kernel packages to the latest patched version to safeguard their systems against potential exploits. Implementing best practices for system security and monitoring can further enhance protection until updates are applied.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities can lead to denial of service and local privilege escalation, potentially allowing unauthorized users to gain elevated access to the system.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
If immediate updates are not possible, implement stricter user permissions and monitor system activity to mitigate risks until the update can be performed.
While specific exploits may not be publicly available, the nature of the vulnerabilities suggests that they could be exploited by malicious actors to compromise system security.
If you encounter problems after updating, consider rolling back to the previous kernel version using the boot menu or consult the AlmaLinux community for support.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
