Kernel Security Update: Addressing Multiple Vulnerabilities in AlmaLinux Packages
Summary
ALSA-2026:6571: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.117.1.el8_10. Fixed in 4.18.0-553.117.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the Linux kernel to ensure stability, performance, and security. The recent vulnerabilities identified in the kernel packages could lead to serious security risks, including privilege escalation and denial of service, making it crucial for users to address these issues promptly.
Vulnerability Detail
The vulnerabilities stem from various issues within the kernel packages, including a race condition in the nouveau driver (CVE-2024-26984), a use-after-free vulnerability in the iSCSI target (CVE-2026-23193), and a potential privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231). Additionally, a double free vulnerability in the qla2xxx driver (CVE-2025-71238) could lead to denial of service and potential privilege escalation. These vulnerabilities can be exploited by attackers to gain unauthorized access or disrupt system operations.
How To Fix
Minimum fixed version
4.18.0-553.117.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to vulnerable components or disable specific kernel features until the update is applied. However, it is strongly recommended to apply the patch as soon as possible to mitigate risks.
Conclusion
The kernel security update for AlmaLinux addresses critical vulnerabilities that could lead to serious security risks. Users are encouraged to update their kernel packages to the latest version to mitigate these vulnerabilities and ensure the integrity of their systems.
See every vulnerability recorded for bpftool →
FAQ
The update addresses multiple vulnerabilities, including race conditions, use-after-free issues, and double free vulnerabilities in various kernel drivers.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, consider implementing workarounds such as limiting access to vulnerable components or disabling specific features until the update can be applied.
While updates may introduce changes, they are primarily aimed at enhancing security. Users should monitor system performance post-update to ensure stability.
It is advisable to regularly check for updates, especially security patches, to ensure your system remains protected against vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
