Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2026:2722: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.34.1.el9_7. Fixed in 5.14.0-611.34.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages could lead to severe security risks, including privilege escalation and denial of service, necessitating immediate attention from system administrators.
Vulnerability Detail
The vulnerabilities stem from various issues within the kernel, including a shift-out-of-bounds error in the ntb_hw_switchtec driver (CVE-2023-53034), a use-after-free condition in the SMC protocol (CVE-2025-40064), and out-of-bounds writes in framebuffer device handling (CVE-2025-40304). These vulnerabilities can lead to privilege escalation, information disclosure, or denial of service, posing significant risks to system integrity and data security.
How To Fix
Minimum fixed version
5.14.0-611.34.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to affected services or disable specific kernel modules until the update is applied. However, this is not a long-term solution and should only be used until the kernel is updated.
Conclusion
The identified vulnerabilities in the AlmaLinux kernel packages present serious security risks that require immediate action. Updating to the patched version is essential to safeguard system integrity and protect against potential exploits. Utilize tools like Vulert to monitor for vulnerabilities and ensure your systems remain secure.
See every vulnerability recorded for kernel →
FAQ
The vulnerabilities could lead to privilege escalation, allowing unauthorized users to gain higher access levels, information disclosure, and denial of service, which could disrupt system operations.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. By uploading your manifest file, such as package-lock.json, you can check for vulnerabilities without needing to access the code.
Continuing to use the affected kernel version poses significant security risks. It is highly recommended to update to the patched version as soon as possible.
If an immediate update is not possible, consider implementing workarounds such as limiting access to affected services or disabling vulnerable kernel modules temporarily.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, as well as through security bulletins from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
