Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities Addressed
Summary
ALSA-2026:21556: Important: kernel security update. Affects kernel versions < 5.14.0-687.12.1.el9_8. Fixed in 5.14.0-687.12.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure system performance and reliability. The recent vulnerabilities identified in the kernel packages pose significant risks, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities in the kernel packages stem from various issues, including improper handling of certain operations, potential overflows, and race conditions. These vulnerabilities could lead to unauthorized access, system crashes, or data corruption. Specific vulnerabilities include CVE-2025-38653, which affects proc_lseek checks, and CVE-2026-31408, which involves a use-after-free condition in Bluetooth handling. The ramifications of these vulnerabilities can be severe, impacting system integrity and security.
How To Fix
Minimum fixed version
5.14.0-687.12.1.el9_8
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to affected services or disable certain kernel features until the update is applied. However, it is highly recommended to perform the update as soon as possible to ensure system security.
Conclusion
The kernel vulnerabilities identified in AlmaLinux pose significant risks to system security and integrity. Immediate action is required to update the kernel packages to the latest patched version. Users are encouraged to utilize tools like Vulert to monitor for vulnerabilities and ensure their systems remain secure.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities can lead to unauthorized access, system crashes, or data corruption, significantly compromising system security.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Consider limiting access to affected services or disabling certain kernel features as a temporary workaround until you can apply the update.
While specific exploits may not be publicly disclosed, the nature of the vulnerabilities suggests that they could be leveraged by attackers to compromise systems.
It is advisable to regularly check for updates, ideally on a weekly basis, to ensure your system remains secure against newly discovered vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
