Moderate Kernel Security Update: Vulnerability in AlmaLinux Packages
Summary
ALSA-2026:6037: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.115.1.el8_10. Fixed in 4.18.0-553.115.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the Linux kernel to provide stability and performance. The kernel packages in AlmaLinux include various components such as bpftool, kernel-core, and kernel-debug, which are essential for system operations and performance monitoring. This vulnerability affects multiple kernel packages, potentially compromising system security and stability.
Vulnerability Detail
The vulnerability stems from a Use-After-Free issue in the ATM subsystem (CVE-2025-38180), which could allow an attacker to exploit memory management flaws. Additionally, there are issues related to error recovery in the macvlan subsystem (CVE-2026-23209) and improper handling of packet headers in the cls_u32 classifier (CVE-2026-23204). These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system integrity and confidentiality.
How To Fix
Minimum fixed version
4.18.0-553.115.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected components or disable specific features related to the ATM subsystem and macvlan until the system is updated. However, this is not a permanent solution and updating the kernel is strongly advised.
Conclusion
In summary, the recent kernel security update addresses critical vulnerabilities in AlmaLinux packages that could compromise system security. Users are urged to update their kernel packages to the latest patched version to mitigate risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for bpftool →
FAQ
A Use-After-Free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which monitors open-source vulnerabilities in real-time. By uploading your manifest file, you can check for vulnerabilities without needing to install any software.
Exploitation of this vulnerability could lead to unauthorized access, system crashes, or data corruption, compromising the integrity and confidentiality of the system.
Continuing to use an affected system poses significant security risks. It is highly recommended to apply the update as soon as possible.
For more details, refer to the CVE pages listed in the vulnerability report or visit the AlmaLinux advisories page.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
