Moderate Kernel Security Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:6632: Moderate: kernel security update. Affects kernel versions < 6.12.0-124.49.1.el10_1. Fixed in 6.12.0-124.49.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise operating system, relies on the Linux kernel for stability and performance. This update addresses several vulnerabilities that could compromise system integrity and availability.
Vulnerability Detail
This vulnerability report highlights multiple security issues within the Linux kernel, including a use-after-free condition in the ECVF vports unload process, which can lead to denial of service (CVE-2025-38109). Other vulnerabilities include local denial of service and memory leaks in the DAMON sysfs (CVE-2026-23144), use-after-free in the bonding module (CVE-2026-23171), and various issues in the SCSI target and macvlan subsystems. These vulnerabilities could potentially allow an attacker to crash the system or execute arbitrary code, posing significant risks to system security.
How To Fix
Minimum fixed version
6.12.0-124.49.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected kernel features or disable specific modules until the system is updated. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
The kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security and stability. It is essential for users to update their kernel packages promptly to mitigate risks associated with these vulnerabilities. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for kernel →
FAQ
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities. By uploading your manifest file like package-lock.json, you can check if your application is affected.
Failing to update the kernel can leave your system vulnerable to attacks that exploit these vulnerabilities, potentially leading to data loss, unauthorized access, or system crashes.
Yes, you can configure your package manager to automatically check for and apply kernel updates, ensuring your system remains secure without manual intervention.
If you experience problems after updating, you can revert to a previous kernel version from the boot menu or consult the AlmaLinux community for support.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
