Skip to content
OpenAdvisories
High ALSA-2026:3083 5 CVEs

Important: kernel security update

Published Feb 23, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
* kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init (CVE-2025-38248)
* kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
* kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
* kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation (CVE-2026-23074)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 25

ReleasePackageFixed in
AlmaLinux · 8 bpftool 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-abi-stablelists 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-core 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-cross-headers 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-debug 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-debug-core 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-debug-devel 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-debug-modules 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-debug-modules-extra 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-devel 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-doc 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-headers 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-modules 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-modules-extra 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-tools 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-tools-libs 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-tools-libs-devel 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-zfcpdump 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-zfcpdump-core 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-zfcpdump-devel 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-zfcpdump-modules 4.18.0-553.107.1.el8_10
AlmaLinux · 8 kernel-zfcpdump-modules-extra 4.18.0-553.107.1.el8_10
AlmaLinux · 8 perf 4.18.0-553.107.1.el8_10
AlmaLinux · 8 python3-perf 4.18.0-553.107.1.el8_10

Vulnerabilities 5

  • High 7.8
    CVE-2025-38129

    page_pool: Fix use-after-free in page_pool_recycle_in_ring

    In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 kernel/locking/lockd…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38248 Public exploit

    bridge: mcast: Fix use-after-free during router port configuration

    In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. The list is consulted during forwarding…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40064

    smc: Fix use-after-free in __pnet_find_base_ndev().

    In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0] smc_pnet_find_ism_resource(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-68800

    mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not chan…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23074

    net/sched: Enforce that teql can only be used as root qdisc

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not impo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-38129
  • report
    https://access.redhat.com/security/cve/CVE-2025-38248
  • report
    https://access.redhat.com/security/cve/CVE-2025-40064
  • report
    https://access.redhat.com/security/cve/CVE-2025-68800
  • report
    https://access.redhat.com/security/cve/CVE-2026-23074
  • report
    https://bugzilla.redhat.com/2376034
  • report
    https://bugzilla.redhat.com/2378981
  • report
    https://bugzilla.redhat.com/2406747
  • report
    https://bugzilla.redhat.com/2429065
  • report
    https://bugzilla.redhat.com/2436791
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-3083.html