Moderate Kernel Security Update for AlmaLinux: Addressing NFS and i40e Vulnerabilities
Summary
ALSA-2025:21917: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.85.1.el8_10. Fixed in 4.18.0-553.85.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. The recent vulnerabilities identified in the kernel packages could potentially impact system stability and security, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities identified in this kernel update are linked to two specific issues: CVE-2025-39697, which involves a race condition when updating an existing write in NFS (Network File System), and CVE-2025-39971, which pertains to improper index validation in the i40e driver for Intel Ethernet devices. These vulnerabilities could allow unauthorized access or manipulation of data, leading to potential data breaches or system instability.
How To Fix
Minimum fixed version
4.18.0-553.85.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected services or disable the NFS service until the kernel is updated. However, this is not a long-term solution and should only be used until the patch is applied.
Conclusion
The kernel vulnerabilities identified in AlmaLinux pose a moderate risk to system security and stability. It is crucial for users to update their systems to the patched version to mitigate these risks. Regular monitoring and timely updates are essential for maintaining a secure operating environment.
See every vulnerability recorded for bpftool →
FAQ
CVE-2025-39697 is a vulnerability in the NFS subsystem that allows for a race condition when updating an existing write, potentially leading to unauthorized data access.
CVE-2025-39971 addresses an issue with index validation in the i40e driver, which could allow attackers to exploit the driver for unauthorized actions.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, consider limiting access to the affected services or disabling them temporarily until the patch can be applied.
It is recommended to regularly check for vulnerabilities, ideally on a weekly basis, and to apply updates as soon as they are available to maintain system security.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
