Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities Addressed
Summary
ALSA-2026:38492: Important: kernel security update. Affects kernel versions < 6.12.0-211.33.1.el10_2. Fixed in 6.12.0-211.33.1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This update addresses critical vulnerabilities that could compromise system integrity and stability.
Vulnerability Detail
The vulnerabilities identified in this update include a general protection fault (GPF) in the md/bitmap subsystem due to a resize race condition (CVE-2026-43163), improper handling of waiters in the rtmutex subsystem (CVE-2026-43499), and a NULL pointer dereference in the futex/requeue mechanism during self-deadlock scenarios (CVE-2026-53166). These vulnerabilities could lead to system crashes, data loss, or unauthorized access, posing significant risks to system security and reliability.
How To Fix
Minimum fixed version
6.12.0-211.33.1.el10_2
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to sensitive system resources and monitor system logs for unusual activity until the kernel is updated. However, this is not a substitute for applying the necessary updates.
Conclusion
The kernel vulnerabilities addressed in this update are critical and require immediate attention. Updating to the patched version will help secure your system against potential threats and ensure optimal performance. Utilize tools like Vulert to monitor your applications for vulnerabilities effectively.
See every vulnerability recorded for kernel →
FAQ
The update addresses vulnerabilities related to a general protection fault in md/bitmap, improper handling of waiters in rtmutex, and a NULL pointer dereference in futex/requeue.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground at Vulert Scanner.
If immediate updates are not possible, consider implementing temporary workarounds such as limiting access to sensitive resources and monitoring system logs.
Continuing to use an unpatched system poses significant risks, including potential crashes, data loss, and unauthorized access. It is highly recommended to apply the update as soon as possible.
For more details, refer to the CVE pages linked in the advisory or consult the AlmaLinux security documentation.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
