Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2026:1617: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.27.1.el9_7. Fixed in 5.14.0-611.27.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the kernel to provide stability, security, and performance. The recent vulnerabilities identified in the kernel packages could potentially compromise system integrity and security, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities in the AlmaLinux kernel packages stem from various issues, including a stack out-of-bounds write during tc entry parsing (CVE-2025-38568), an invalid quirk input mapping in Intel ASoC (CVE-2025-40154), and improper handling of parent pointers in devlink rate nodes (CVE-2025-40251). These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system stability and security.
How To Fix
Minimum fixed version
5.14.0-611.27.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected kernel functionalities or disable specific features until the update is applied. However, the best course of action is to promptly update to the patched version.
Conclusion
The recent kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security and stability. Users are strongly advised to update their kernel packages to the latest patched version to mitigate these risks effectively.
See every vulnerability recorded for kernel →
FAQ
The update addresses vulnerabilities related to stack out-of-bounds writes, invalid quirk input mappings, and improper handling of parent pointers in devlink rate nodes.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If an immediate update is not possible, consider implementing temporary workarounds such as limiting access to affected functionalities until the update can be applied.
Continuing to use the affected kernel versions poses security risks. It is highly recommended to update to the patched version as soon as possible.
For detailed information about the vulnerabilities, refer to the CVE pages linked in the advisory or consult the AlmaLinux security advisories.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
