Kernel Security Update: Critical Vulnerabilities in AlmaLinux Packages
Summary
ALSA-2026:66000: Important: kernel security update. Affects bpftool versions < 4.18.0-553.160.1.el8_10. Fixed in 4.18.0-553.160.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. The recent vulnerabilities identified in the kernel packages pose significant risks, potentially allowing unauthorized access or system instability.
Vulnerability Detail
The vulnerabilities stem from various issues within the kernel packages, including improper handling of requests, outdated coding practices, and insufficient validation of data. Specific vulnerabilities include CVE-2026-43493, which affects the crypto subsystem, and CVE-2026-53002, which involves unsafe string operations. These vulnerabilities could lead to denial of service, data corruption, or unauthorized access, impacting system integrity and user data.
How To Fix
Minimum fixed version
4.18.0-553.160.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit exposure by disabling certain kernel features or restricting access to vulnerable services. However, the most effective solution is to apply the patch as soon as possible.
Conclusion
The recent kernel security update addresses critical vulnerabilities in AlmaLinux packages that could compromise system integrity and security. Users are urged to update their kernel packages promptly to mitigate risks. Utilizing tools like Vulert can help in monitoring vulnerabilities in real-time.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities can lead to denial of service, data corruption, or unauthorized access, potentially compromising system security.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
Delaying the update can expose your system to risks associated with the vulnerabilities. It is highly recommended to update as soon as possible.
If immediate updates are not possible, consider implementing temporary workarounds to limit exposure to the vulnerabilities.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory or through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
