Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2026:2721: Moderate: kernel security update. Affects kernel versions < 6.12.0-124.38.1.el10_1. Fixed in 6.12.0-124.38.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. This update addresses several vulnerabilities that could compromise system integrity and security.
Vulnerability Detail
This security update addresses multiple vulnerabilities in the AlmaLinux kernel packages. Notable issues include a shift-out-of-bounds vulnerability in the ntb_hw_switchtec driver (CVE-2023-53034), a use-after-free vulnerability in the Linux kernel erofs (CVE-2025-38172), and a buffer overflow in the ALSA USB audio driver (CVE-2025-40269). These vulnerabilities can lead to information disclosure, denial of service, and potential system crashes, posing significant risks to users and applications relying on the kernel.
How To Fix
Minimum fixed version
6.12.0-124.38.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected kernel modules or limit access to sensitive resources until the update is applied. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
In summary, the recent kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security. Users are strongly advised to update their kernel packages to the latest version to mitigate risks and ensure system integrity.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities can lead to system crashes, information disclosure, and denial of service, affecting the overall security and stability of the system.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
It is not recommended to continue using the current kernel version due to the identified vulnerabilities. Updating is crucial for maintaining system security.
If immediate updates are not possible, consider implementing workarounds such as disabling affected modules or restricting access to sensitive resources.
Detailed information about the vulnerabilities can be found on the respective CVE pages linked in the security advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
