Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities in Kernel Packages
Summary
ALSA-2026:39179: Important: kernel security update. Affects bpftool versions < 4.18.0-553.144.1.el8_10. Fixed in 4.18.0-553.144.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. This specific vulnerability affects various kernel packages, including bpftool, kernel, and kernel-debug, which are essential for system operations and security.
Vulnerability Detail
This vulnerability arises from multiple issues within the kernel packages, including a flaw in the network bridge that could lead to a stable FDB destination snapshot being mismanaged in RCU readers (CVE-2026-46086) and a defensive unhashing issue in the xfrm_state lists during deletion (CVE-2026-46116). Additionally, there is a risk of data corruption in XFS when using reflink. The ramifications of these vulnerabilities could lead to system instability, unauthorized access, or data loss, making it critical for users to address them promptly.
How To Fix
Minimum fixed version
4.18.0-553.144.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the use of features that rely on the affected kernel components until the update is applied. However, the most effective solution is to perform the update as soon as possible.
Conclusion
In summary, the recent kernel vulnerabilities in AlmaLinux pose significant risks to system stability and security. It is crucial for users to update their kernel packages to the latest patched version to safeguard their systems. Utilizing tools like Vulert can aid in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities can lead to system instability, unauthorized access, and potential data loss.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software by simply uploading your manifest file.
Limiting the use of features that depend on the affected kernel components can help mitigate risks temporarily.
If immediate updates are not possible, ensure that your system is backed up and monitor for any unusual activity.
Detailed information can be found on the CVE pages linked in the advisory or by visiting the Vulert website.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
