Kernel Security Update: Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2025:22854: Moderate: kernel security update. Affects kernel versions < 6.12.0-124.20.1.el10_1. Fixed in 6.12.0-124.20.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux is a community-driven, open-source Linux distribution that provides a stable and secure platform for enterprise applications. The kernel packages in AlmaLinux include various versions and configurations, such as kernel-64k, kernel-debug, and kernel-rt, each tailored for specific use cases. These packages are crucial for system performance and security, making their integrity paramount.
Vulnerability Detail
The vulnerabilities identified in the AlmaLinux kernel packages stem from various issues, including uninitialized variables, use-after-free (UAF) conditions, and improper handling of notifications. These vulnerabilities can lead to system crashes, unauthorized access, and potential exploitation by malicious actors. Specific CVEs associated with these vulnerabilities include CVE-2025-38737, CVE-2025-39925, CVE-2025-39979, CVE-2025-39981, CVE-2025-39982, CVE-2025-39983, CVE-2025-40047, CVE-2025-40058, and CVE-2025-40185. The ramifications of these vulnerabilities can range from degraded system performance to complete system compromise.
How To Fix
Minimum fixed version
6.12.0-124.20.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to sensitive system resources and monitor system logs for unusual activity until the kernel is updated. Additionally, disabling specific kernel modules that are known to be vulnerable may provide a short-term mitigation strategy.
Conclusion
The vulnerabilities in the AlmaLinux kernel packages pose significant risks to system security and stability. It is crucial for users to update their kernel packages to the latest patched version to mitigate these risks. Regular monitoring and proactive management of system vulnerabilities are essential for maintaining a secure computing environment.
See every vulnerability recorded for kernel →
FAQ
The main vulnerabilities include issues related to uninitialized variables and use-after-free conditions, which can lead to system crashes and unauthorized access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
If immediate updates are not possible, consider implementing temporary workarounds such as limiting access to sensitive resources and monitoring system logs.
Yes, the vulnerabilities are associated with several CVEs, including CVE-2025-38737, CVE-2025-39925, CVE-2025-39979, CVE-2025-39981, CVE-2025-39982, CVE-2025-39983, CVE-2025-40047, CVE-2025-40058, and CVE-2025-40185.
It is recommended to check for kernel updates regularly, ideally on a weekly basis, to ensure your system remains secure and up-to-date.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
