Critical Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:0793: Important: kernel security update. Affects kernel versions < 5.14.0-611.24.1.el9_7. Fixed in 5.14.0-611.24.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure the reliability and performance of its systems. The recent vulnerabilities identified in the kernel packages could potentially compromise system integrity and security, making timely updates essential.
Vulnerability Detail
The vulnerabilities identified include issues with DMA-fences compliance, data verification in SMB clients, command header size validation in DRM, race conditions in USB handling, and potential use-after-free scenarios in Ceph. These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system security and stability.
How To Fix
Minimum fixed version
5.14.0-611.24.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling specific kernel features related to the vulnerabilities until the system can be updated. However, this is not recommended as a long-term solution and should only be used if absolutely necessary.
Conclusion
The kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security and stability. It is crucial for users to update their systems to the patched version promptly to mitigate risks. Utilizing tools like Vulert can help monitor for vulnerabilities effectively.
See every vulnerability recorded for kernel →
FAQ
The update addresses vulnerabilities related to DMA-fences compliance, SMB client data verification, command header size validation in DRM, race conditions in USB handling, and potential use-after-free scenarios in Ceph.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. By uploading your manifest file, such as package-lock.json, you can check for vulnerabilities without needing to install any software.
Continuing to use an unpatched system poses significant security risks, including potential unauthorized access and data loss. It is highly recommended to apply the update as soon as possible.
If you experience issues after the update, you can revert to the previous kernel version using the GRUB menu during boot. Additionally, check the system logs for any error messages that may help diagnose the problem.
For detailed information about the vulnerabilities, including CVSS scores and acknowledgments, refer to the CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
