Moderate Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:22388: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.87.1.el8_10. Fixed in 4.18.0-553.87.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel to ensure system stability and security. The recent vulnerabilities identified in the kernel packages can potentially compromise system integrity and expose sensitive data.
Vulnerability Detail
The vulnerabilities in the kernel packages include issues such as improper handling of client locks in NFS, race conditions in SMB client operations, and memory management flaws that could lead to system crashes or unauthorized access. Specifically, CVE-2025-38724 addresses a failure in get_client_locked(), CVE-2025-39825 fixes a race condition during concurrent file operations, and CVE-2025-39898 resolves a heap overflow issue. These vulnerabilities can lead to severe consequences, including data loss, system instability, and unauthorized access to system resources.
How To Fix
Minimum fixed version
4.18.0-553.87.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected services or disable the features that utilize the vulnerable components until the system is updated. For example, if NFS or SMB services are not critical, consider stopping these services with the command:
sudo systemctl stop nfs-server' or 'sudo systemctl stop smb'.
Conclusion
In summary, the kernel vulnerabilities identified in AlmaLinux pose serious risks to system security and integrity. It is imperative to update the affected packages to the latest patched versions to mitigate these risks. Users should also consider temporary workarounds while preparing for the update.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities can lead to unauthorized access, data loss, and system crashes, potentially compromising the entire system.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which analyzes your manifest file for vulnerabilities.
It is not recommended to continue using the affected packages as they pose significant security risks. Updating to the patched version is crucial.
If immediate updates are not possible, consider implementing workarounds such as disabling affected services or restricting access until the update can be applied.
For more details, refer to the CVE pages listed in the advisory or consult the AlmaLinux security documentation.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
