Moderate Kernel Security Update for AlmaLinux: Addressing Use-After-Free and Double Free Vulnerabilities
Summary
ALSA-2026:3066: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.35.1.el9_7. Fixed in 5.14.0-611.35.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a robust kernel to ensure stability and security. The recent vulnerabilities identified in the kernel packages pose significant risks, including potential denial of service and system instability.
Vulnerability Detail
The vulnerabilities identified are a use-after-free issue in the page_pool_recycle_in_ring function (CVE-2025-38129) and a double free vulnerability in the exFAT filesystem (CVE-2025-38206). The former can lead to memory corruption, while the latter can result in a denial of service, affecting system availability and reliability. These vulnerabilities arise from improper memory management, which can be exploited by attackers to execute arbitrary code or crash the system.
How To Fix
Minimum fixed version
5.14.0-611.35.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected functionalities of the kernel until the patch is applied. This may involve disabling certain features or services that rely on the vulnerable components.
Conclusion
The kernel vulnerabilities CVE-2025-38129 and CVE-2025-38206 pose significant risks to AlmaLinux systems. It is crucial to apply the available patches promptly to mitigate these risks and ensure system stability and security. Regular monitoring for vulnerabilities using tools like Vulert can further enhance security posture.
See every vulnerability recorded for kernel →
FAQ
CVE-2025-38129 refers to a use-after-free vulnerability in the kernel, while CVE-2025-38206 is a double free vulnerability in the exFAT filesystem.
Exploitation of these vulnerabilities can lead to system crashes, unauthorized access, or denial of service, compromising system integrity and availability.
Yes, a patch is available in the kernel version 5.14.0-611.35.1.el9_7. Updating to this version will resolve the vulnerabilities.
If immediate updates are not possible, consider implementing workarounds such as limiting access to vulnerable functionalities until the patch can be applied.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json. You can check for vulnerabilities without signup using the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
