Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2026:3488: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.36.1.el9_7. Fixed in 5.14.0-611.36.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. This update addresses several vulnerabilities that could compromise system integrity and availability.
Vulnerability Detail
This vulnerability arises from multiple issues within the kernel packages, specifically affecting the SMC (Shared Memory Communication) and IPv6 functionalities. The identified vulnerabilities include a potential denial of service due to a deadlock in hugetlb folio migration, a bug in pskb_expand_head() during calipso_skbuff_setattr(), and improper handling of socket destination retrieval. These vulnerabilities could lead to system crashes or unresponsive states, severely impacting the reliability of systems running affected kernel versions.
How To Fix
Minimum fixed version
5.14.0-611.36.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the use of features related to SMC and IPv6 until the kernel is updated. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
The kernel security update for AlmaLinux addresses critical vulnerabilities that could affect system stability and security. Users are strongly encouraged to update their kernel packages to the latest version to ensure their systems remain secure and reliable.
See every vulnerability recorded for kernel →
FAQ
The update addresses vulnerabilities related to SMC socket handling, IPv6 bugs, and a deadlock issue in hugetlb folio migration.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider limiting the use of affected features as a temporary workaround until you can apply the patch.
Using an outdated kernel poses significant security risks, including potential system crashes and unauthorized access. It is advisable to update as soon as possible.
For detailed information about the vulnerabilities and their impacts, refer to the CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
