Moderate Kernel Security Update for AlmaLinux 8: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:74133: Moderate: kernel security, bug fix, and enhancement update. Affects bpftool versions < 4.18.0-553.170.1.el8_10. Fixed in 4.18.0-553.170.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux 8, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability, performance, and security. This update addresses several vulnerabilities that could potentially compromise system integrity and performance.
Vulnerability Detail
The vulnerabilities addressed in this update include a range of issues such as a length underflow in RDMA/siw, a bug in vmxnet3 affecting Geneve packets, and problems with the dm-integrity module. These vulnerabilities could lead to system crashes, unauthorized access, or data corruption, posing significant risks to system security and reliability. The vulnerabilities are tracked under CVEs: CVE-2026-63823, CVE-2026-64102, CVE-2026-68299, CVE-2026-72099, and CVE-2026-72329.
How To Fix
Minimum fixed version
4.18.0-553.170.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider disabling the affected modules or features until the system can be updated. However, this is not recommended as a long-term solution.
Conclusion
The kernel security update for AlmaLinux 8 addresses multiple vulnerabilities that could compromise system integrity and performance. It is crucial for users to update their systems to the patched version to mitigate these risks effectively.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities could lead to system crashes, unauthorized access, or data corruption, significantly affecting system security and performance.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without any signup.
If immediate updates are not possible, consider disabling the affected features or modules as a temporary workaround, but plan to update as soon as possible.
Regularly check for updates and vulnerabilities, ideally on a weekly basis, to ensure your system remains secure.
For detailed information, refer to the CVE pages listed in the vulnerability report or consult the AlmaLinux advisory documentation.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
