Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2026:0445: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.20.1.el9_7. Fixed in 5.14.0-611.20.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The kernel packages in AlmaLinux include various versions and configurations, such as kernel-64k, kernel-debug, and kernel-rt, each tailored for specific use cases. Recent vulnerabilities have been identified that could potentially compromise system integrity and security.
Vulnerability Detail
The vulnerabilities stem from several issues within the kernel, including a slab out-of-bounds access in the multitouch HID driver (CVE-2025-39806), an out-of-bounds read in the audit subsystem (CVE-2025-39840), a memory failure handling bug (CVE-2025-39883), and a NULL dereference in the SCTP protocol handling (CVE-2025-40240). These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system security and stability.
How To Fix
Minimum fixed version
5.14.0-611.20.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected components or disable specific features related to multitouch input and SCTP protocol handling until the kernel is updated. However, this is not a permanent solution and should only be used until the update can be applied.
Conclusion
In summary, the recent kernel security update addresses critical vulnerabilities in AlmaLinux kernel packages that could compromise system integrity. Users are urged to update their kernel packages to the latest patched version to mitigate these risks. For ongoing monitoring of vulnerabilities, consider using Vulert, which provides real-time alerts based on your manifest file.
See every vulnerability recorded for kernel →
FAQ
These vulnerabilities can lead to unauthorized access, system crashes, and potential data corruption, compromising system security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Continuing to use the affected kernel versions poses a security risk. It is recommended to update to the patched version as soon as possible.
If immediate updates are not possible, consider implementing workarounds such as limiting access to affected components.
Detailed information about the vulnerabilities can be found on the respective CVE pages: CVE-2025-39806, CVE-2025-39840, CVE-2025-39883, and CVE-2025-40240.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
