Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Kernel Packages
Summary
ALSA-2026:6153: Moderate: kernel security update. Affects kernel versions < 5.14.0-611.45.1.el9_7. Fixed in 5.14.0-611.45.1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. This update addresses several vulnerabilities that could compromise system integrity, leading to potential denial of service, memory leaks, and arbitrary code execution.
Vulnerability Detail
This security update addresses multiple vulnerabilities in the AlmaLinux kernel packages. Key issues include a Use-After-Free vulnerability in the ATM subsystem (CVE-2025-38180), a potential double free in the DRM scheduler (CVE-2025-40096), and a local denial of service and memory leak in the DAMON sysfs (CVE-2026-23144). These vulnerabilities could allow attackers to crash the system or execute arbitrary code, posing significant risks to system security and stability.
How To Fix
Minimum fixed version
5.14.0-611.45.1.el9_7
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to vulnerable components or disable specific features until the kernel is updated. However, this is not a permanent solution and should only be considered until the patch is applied.
Conclusion
The recent kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security. It is crucial for users to update their kernel packages to the latest version to protect against potential exploits. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for kernel →
FAQ
A Use-After-Free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file, you can quickly check for vulnerabilities without needing to install any software.
Failing to update the kernel can leave your system vulnerable to attacks that exploit these vulnerabilities, potentially leading to data loss, system crashes, or unauthorized access.
Yes, you can configure your system to automatically check for and apply kernel updates using package management tools like DNF or APT, depending on your Linux distribution.
If you experience problems after updating, you can revert to a previous kernel version from the GRUB menu during boot or consult the AlmaLinux community for support.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
