Moderate Kernel Security Update for AlmaLinux: Addressing Multiple WiFi Vulnerabilities
Summary
ALSA-2025:19447: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.82.1.el8_10. Fixed in 4.18.0-553.82.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of any Linux operating system, serving as the core interface between the hardware and software. It manages system resources, hardware interactions, and provides essential services for applications. The AlmaLinux kernel is built on the stable Linux kernel, ensuring security and performance for users. However, vulnerabilities can arise, necessitating timely updates to maintain system integrity and security.
Vulnerability Detail
This vulnerability affects the kernel packages in AlmaLinux 8, specifically targeting WiFi functionalities. The issues stem from improper handling of action frame sizes in S1G, leading to potential out-of-bounds (OOB) access and integer underflows when receiving packets. Additionally, a use-after-free vulnerability in the cmp_bss() function poses risks of memory corruption, which could be exploited by attackers to execute arbitrary code or crash the system. The vulnerabilities are identified by CVE-2023-53226, CVE-2023-53257, and CVE-2025-39864.
How To Fix
Minimum fixed version
4.18.0-553.82.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable WiFi functionalities until the kernel is updated. This can be done by running the command: 'nmcli radio wifi off'. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
The kernel vulnerabilities identified in AlmaLinux 8 present significant risks to system security, particularly affecting WiFi functionalities. It is crucial for users to update their kernel packages to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for bpftool →
FAQ
The vulnerabilities can lead to system crashes, unauthorized access, or arbitrary code execution, compromising system security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without signing up.
Continuing to use the affected kernel version poses security risks. It is advisable to update to the patched version as soon as possible.
If immediate updates are not possible, consider disabling WiFi functionalities as a temporary workaround until the update can be applied.
Detailed information can be found on the CVE pages for CVE-2023-53226, CVE-2023-53257, and CVE-2025-39864, as well as through the AlmaLinux advisories.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
