Moderate Kernel Security Update for AlmaLinux: Addressing Vulnerabilities in Multiple Packages
Summary
ALSA-2026:54246: Moderate: kernel security update. Affects bpftool versions < 4.18.0-553.155.1.el8_10. Fixed in 4.18.0-553.155.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise-grade Linux distribution, relies on the kernel for stability and performance. The recent vulnerabilities identified in the kernel packages, including 'bpftool' and 'kernel', pose risks that could affect system integrity and security.
Vulnerability Detail
The vulnerabilities stem from issues in the kernel's handling of partition descriptors and memory management. Specifically, CVE-2026-45991 involves improper bookkeeping in the UDF (Universal Disk Format) filesystem, which could lead to data corruption or system crashes. CVE-2026-53009 relates to a double-free error in the ice driver, potentially allowing an attacker to exploit memory management flaws, leading to arbitrary code execution or denial of service.
How To Fix
Minimum fixed version
4.18.0-553.155.1.el8_10
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected kernel features or disable the UDF filesystem until the system is updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
In summary, the recent kernel security update for AlmaLinux addresses critical vulnerabilities that could impact system stability and security. Users are strongly advised to update their packages to the latest version to mitigate these risks effectively.
See every vulnerability recorded for bpftool →
FAQ
The update addresses CVE-2026-45991 related to UDF filesystem bookkeeping and CVE-2026-53009 concerning a double-free error in the ice driver.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Failure to apply the update may leave your system vulnerable to data corruption, crashes, or potential exploitation by attackers.
Yes, you can use 'sudo dnf update kernel bpftool ...' to update all affected packages to the patched version.
If you experience problems after updating, consider rolling back to the previous kernel version or consulting the AlmaLinux community for support.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
