Kernel Security Update: Critical Vulnerabilities in AlmaLinux Packages
Summary
ALSA-2026:49214: Important: kernel security update. Affects bpftool versions < 4.18.0-553.150.1.el8_10. Fixed in 4.18.0-553.150.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the Linux kernel to provide stability, security, and performance. The recent vulnerabilities identified in the kernel packages could potentially compromise system integrity and security, making timely updates essential for users.
Vulnerability Detail
The vulnerabilities stem from several issues within the kernel, including a missing netlink_ns_capable() check for peer netns (CVE-2026-31692), unsafe access to master conntrack in netfilter (CVE-2026-43116), and a false positive on permission events in fanotify (CVE-2026-46150). Additionally, there is a use-after-free (UAF) vulnerability due to a missing handler for TC_ACT_CONSUMED in tcf_qevent_handle, which has been addressed in CVE-2026-64530. These vulnerabilities can lead to unauthorized access, denial of service, and potential system crashes.
How To Fix
Minimum fixed version
4.18.0-553.150.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected services until the kernel is updated. This can be done by modifying firewall rules or disabling specific network functionalities that may expose the vulnerabilities.
Conclusion
In summary, the recent kernel vulnerabilities in AlmaLinux pose significant risks to system security and stability. It is crucial for users to update their kernel packages to the latest patched version to mitigate these risks. Utilizing tools like Vulert can further enhance security by providing real-time monitoring of vulnerabilities.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities can lead to unauthorized access, denial of service, and system crashes, compromising the overall security and stability of the system.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
If immediate updates are not possible, consider applying temporary workarounds such as restricting access to affected services or modifying firewall rules.
It is advisable to check for kernel updates regularly, ideally on a weekly basis, to ensure that your system remains secure against newly discovered vulnerabilities.
Vulert is a service that monitors and alerts users in real-time for open-source vulnerabilities in software. It uses a manifest file like package-lock.json to track vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
