Critical Kernel Vulnerability in AlmaLinux Packages: Important Security Update
Summary
ALSA-2026:36957: Important: kernel security update. Affects kernel versions < 5.14.0-687.24.1.el9_8. Fixed in 5.14.0-687.24.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. The recent vulnerabilities identified in the kernel packages could potentially compromise system integrity and security, making timely updates crucial.
Vulnerability Detail
The vulnerabilities stem from issues in the kernel's network scheduling and KVM (Kernel-based Virtual Machine) functionalities. Specifically, CVE-2025-71066 involves improper handling of class removal from the active list during deletion, which could lead to unexpected behavior. CVE-2026-46113 and CVE-2026-53359 both relate to use-after-free errors in shadow paging due to unexpected guest frame numbers and roles, respectively. These vulnerabilities could allow attackers to exploit the system, leading to unauthorized access or denial of service.
How To Fix
Minimum fixed version
5.14.0-687.24.1.el9_8
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected functionalities in the kernel configuration, but this is not recommended as a long-term solution. It is crucial to apply the official patches as soon as possible.
Conclusion
The identified vulnerabilities in the AlmaLinux kernel packages pose serious security risks that can be mitigated through timely updates. Users are urged to apply the necessary patches and monitor their systems for any potential threats. Utilizing tools like Vulert can further enhance security by providing real-time alerts for open-source vulnerabilities.
See every vulnerability recorded for kernel →
FAQ
Exploitation of these vulnerabilities could lead to unauthorized access, data breaches, or system crashes.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without signup.
Continuing to use an unpatched system poses significant security risks. It is highly recommended to update as soon as possible.
If immediate updates are not possible, consider implementing temporary workarounds, but plan to update as soon as feasible.
Detailed information can be found on the CVE pages for CVE-2025-71066, CVE-2026-46113, and CVE-2026-53359.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
