Kernel Security Update: Addressing Pointer Arithmetic and Use-After-Free Vulnerabilities in AlmaLinux Kernel
Summary
ALSA-2026:4759: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.41.1.el9_7. Fixed in 5.14.0-611.41.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This vulnerability affects various kernel packages in AlmaLinux 9, which are essential for system stability and security.
Vulnerability Detail
This vulnerability arises from two critical issues within the kernel packages: incorrect pointer arithmetic in the intel-thc-hid driver (CVE-2025-39818) and a use-after-free condition when updating multicast route statistics in the mlxsw subsystem (CVE-2025-68800). These vulnerabilities can lead to system crashes, unauthorized access, or arbitrary code execution, posing significant risks to system integrity and data security.
How To Fix
Minimum fixed version
5.14.0-611.41.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected drivers or features until the kernel is updated. However, this may impact system functionality and should only be considered if immediate patching is not feasible.
Conclusion
In summary, the kernel vulnerabilities identified in AlmaLinux 9 pose significant risks to system security and stability. It is crucial for users to update their kernel packages to the latest patched version to mitigate these vulnerabilities effectively. Regular monitoring and timely updates are essential to maintaining a secure operating environment.
See every vulnerability recorded for kernel →
FAQ
CVE-2025-39818 refers to a vulnerability in the intel-thc-hid driver that involves incorrect pointer arithmetic, potentially leading to system instability.
CVE-2025-68800 is a vulnerability in the mlxsw subsystem that can cause a use-after-free condition, which may allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to update the kernel may expose your system to potential crashes, unauthorized access, and exploitation of the vulnerabilities, compromising system security.
Yes, Vulert provides a solution that monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
