Critical Kernel Vulnerabilities in AlmaLinux: Important Security Update for Kernel Packages
Summary
ALSA-2026:19225: Important: kernel security update. Affects kernel versions < 5.14.0-687.5.3.el9_8. Fixed in 5.14.0-687.5.3.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. Recent vulnerabilities have been identified in the kernel packages, which could potentially compromise system integrity and availability.
Vulnerability Detail
The vulnerabilities identified in the kernel packages include a Denial of Service (DoS) issue due to too-short AAD (CVE-2026-23060), a reversion to operating out-of-place in the crypto subsystem (CVE-2026-31431), a limitation on RX SG extraction by receive buffer budget (CVE-2026-31677), and a new Local Privilege Escalation (LPE) vulnerability known as 'Dirty Frag' (CVE-2026-43284). These vulnerabilities can lead to system crashes, unauthorized access, and exploitation of system resources, posing significant risks to users and organizations.
How To Fix
Minimum fixed version
5.14.0-687.5.3.el9_8
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to sensitive system resources and monitor system logs for unusual activity until the kernel is updated. Additionally, consider implementing firewall rules to restrict unauthorized access.
Conclusion
In summary, the recent kernel vulnerabilities in AlmaLinux pose significant risks to system security and stability. It is crucial for users to update their kernel packages to the latest patched version to mitigate these risks. Implementing workarounds can provide temporary relief, but timely updates are essential for maintaining a secure environment.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities can lead to system crashes, unauthorized access, and exploitation of system resources, which may compromise data integrity and availability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
Delaying the update can expose your system to risks associated with the identified vulnerabilities. It is recommended to update as soon as possible.
If immediate updates are not possible, consider implementing temporary workarounds such as restricting access to sensitive resources and monitoring system activity.
For more details, refer to the CVE pages listed in the vulnerability report or consult the AlmaLinux advisory documentation.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
