Kernel Vulnerabilities

Critical Linux Kernel Vulnerabilities

Multiple critical Kernel vulnerabilities CVE-2025-71066 (Copy Fail), CVE-2026-46300 (Fragnesia), CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) have been discovered in the Linux Kernel.

These race condition vulnerabilities allow local attackers to escalate privileges, potentially leading to arbitrary code execution with kernel-level access. These vulnerabilities are considered high severity.

If your cloud server is running with Ubuntu 22/24 or AlmaLinux 8/9, we strongly recommend updating your system kernel to the latest available version.

Steps to be Performed for AlmaLinux OS

• Update kernel packages:

  dnf update 'kernel*'

• Reboot the server:

  reboot

Steps to be Performed for Ubuntu OS

• Update packages and kernel:

  apt update && sudo apt upgrade

• Reboot the server:

  reboot

After Reboot Verification

• Confirm whether the kernel is updated with the command:

  uname -r

• Make sure your applications / application servers are started and websites / applications are working fine after reboot.

We recommend performing the update during a maintenance window to avoid temporary service interruption.