Kernel Security Update: Addressing Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2025:19469: Moderate: kernel security update. Affects kernel versions < 6.12.0-55.42.1.el10_0. Fixed in 6.12.0-55.42.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the kernel for stability and performance. This update addresses critical security vulnerabilities that could potentially compromise system integrity and data security.
Vulnerability Detail
The vulnerabilities identified in this update include a constant-time MAC comparison issue in the IPv6 segment routing (CVE-2025-39702) and a use-after-free (UAF) vulnerability in the kernfs polling mechanism when an open file is released (CVE-2025-39881). These vulnerabilities could allow an attacker to exploit the system, leading to unauthorized access or denial of service.
How To Fix
Minimum fixed version
6.12.0-55.42.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected kernel features until the update is applied. However, the best course of action is to apply the patch as soon as possible to mitigate risks.
Conclusion
In summary, the kernel security update for AlmaLinux addresses critical vulnerabilities that could jeopardize system security. Users are urged to apply the updates promptly to safeguard their systems against potential exploits.
See every vulnerability recorded for kernel →
FAQ
The update addresses CVE-2025-39702, a constant-time MAC comparison issue, and CVE-2025-39881, a use-after-free vulnerability in kernfs polling.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Exploiting these vulnerabilities could lead to unauthorized access, data breaches, or denial of service, compromising the security and stability of the system.
Yes, it is recommended to reboot your system after applying kernel updates to ensure that the new kernel is loaded and running.
For more details about the vulnerabilities and their impact, refer to the CVE pages listed in the advisory or visit the AlmaLinux security advisories page.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
