Critical Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:0759: Important: kernel security update. Affects bpftool versions < 4.18.0-553.94.1.el8_10. Fixed in 4.18.0-553.94.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security for its users. The recent vulnerabilities identified in the kernel packages pose significant risks, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities stem from various issues within the kernel, including a use-after-free in the SMB client (CVE-2025-38051), improper verification of data offsets (CVE-2025-39933), and potential double free in the DRM scheduler (CVE-2025-40096). These vulnerabilities could lead to system crashes, unauthorized access, or exploitation by malicious actors, thereby compromising the integrity and security of the system.
How To Fix
Minimum fixed version
4.18.0-553.94.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected services or disable the SMB client functionality until the kernel is updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
The kernel vulnerabilities identified in AlmaLinux pose serious risks to system security and stability. Users are strongly advised to update their kernel packages to the latest patched version to mitigate these vulnerabilities. Regular monitoring and updates are crucial for maintaining a secure computing environment.
See every vulnerability recorded for bpftool →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution or crashes.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without requiring any signup.
Failing to update the kernel can expose your system to security breaches, data loss, and unauthorized access, putting sensitive information at risk.
Yes, updating the kernel is essential for maintaining system security and stability. Always ensure you are using the latest stable version.
If you experience problems after the update, you can revert to the previous kernel version from the GRUB menu during system boot.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
