Kernel Security Update: Addressing Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2025:22865: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.13.1.el9_7. Fixed in 5.14.0-611.13.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the Linux kernel to provide stability, performance, and security. The kernel packages in AlmaLinux include various versions and configurations, such as kernel-64k, kernel-debug, and kernel-rt, each tailored for specific use cases. However, vulnerabilities in the kernel can pose significant risks, potentially leading to unauthorized access or system instability.
Vulnerability Detail
This vulnerability arises from two specific issues within the kernel packages: CVE-2025-39925, which involves the implementation of a NETDEV_UNREGISTER notification handler for the CAN j1939 protocol, and CVE-2025-39979, which addresses a use-after-free (UAF) condition in the flow counter release for the net/mlx5 subsystem. These vulnerabilities could allow attackers to exploit the kernel, leading to potential system crashes or unauthorized access to sensitive data.
How To Fix
Minimum fixed version
5.14.0-611.13.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected kernel features or disable specific network protocols until the update is applied. However, this is not a permanent solution and should be followed by updating the kernel as soon as possible.
Conclusion
In summary, the kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security and stability. Users are strongly encouraged to update their kernel packages to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities in real-time, ensuring your software remains secure.
See every vulnerability recorded for kernel →
FAQ
The update addresses CVE-2025-39925 and CVE-2025-39979, which involve issues in the CAN j1939 protocol and a use-after-free condition in the net/mlx5 subsystem.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
If immediate updates are not possible, consider limiting access to affected features or disabling specific network protocols as a temporary workaround.
Continuing to use an unpatched system poses security risks, including potential unauthorized access and system instability. It is highly recommended to apply the update as soon as possible.
More details about the vulnerabilities can be found on the CVE pages for CVE-2025-39925 and CVE-2025-39979, as well as through the AlmaLinux advisories.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
